Skip to content
OpenAdvisories
Unscored CVE-2017-3185 EUVD-2017-12311GHSA-hgpq-gf6r-4vr6

ACTi cameras including the D, B, I, and E series using firmware version A1D-500-V6.11.31-AC have a web application that uses the GET method…

Published Dec 15, 2017 · Updated Aug 5, 2024 · Assigned by certcc

Vendor: ACTi Product: ACTi D, B, I, and E series cameras

Description

ACTi cameras including the D, B, I, and E series using firmware version A1D-500-V6.11.31-AC have a web application that uses the GET method to process requests that contain sensitive information such as user account name and password, which can expose that information through the browser's history, referrers, web logs, and other sources.

Affected products

VendorProductAffectedFixed
ACTi ACTi D, B, I, and E series cameras A1D-500-V6.11.31-AC —

References