Description
ACTi cameras including the D, B, I, and E series using firmware version A1D-500-V6.11.31-AC use non-random default credentials across all devices. A remote attacker can take complete control of a device using default admin credentials.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ACTi | ACTi D, B, I, and E series cameras | A1D-500-V6.11.31-AC | — |
References
- https://twitter.com/hack3rsca/status/839599437907386368
- 96720 vdb-entry
- https://twitter.com/Hfuhs/status/839252357221330944
- VU#355151 third-party-advisory