CVE-2017-3185

CVE-2017-3185

Vendor Acti Corporation
Product ACTi D, B, I, and E series cameras
Weakness CWE-598
Published December 15, 2017
Last update August 5, 2024

CVSS base score

What the vulnerability does

01Description

ACTi cameras including the D, B, I, and E series using firmware version A1D-500-V6.11.31-AC have a web application that uses the GET method to process requests that contain sensitive information such as user account name and password, which can expose that information through the browser's history, referrers, web logs, and other sources.

Key dates

02Disclosure timeline

December 15, 2017 CVE published
August 5, 2024 Record updated