CVE-2017-3185 - CVE House
Back to Database
Status published Critical CVE-2017-3185

ACTi cameras including the D, B, I, and E series...

Vulnerability Description

ACTi cameras including the D, B, I, and E series using firmware version A1D-500-V6.11.31-AC have a web application that uses the GET method to process requests that contain sensitive information such as user account name and password, which can expose that information through the browser's history, referrers, web logs, and other sources.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2017-3185

Credits & Attribution

No credits recorded in the NVD database.

References

More from ACTi Corporation

View All →
CVE-2017-3186
ACTi cameras including the D, B, I, and E series...
Critical 9.8
CVE-2017-3184
ACTi cameras including the D, B, I, and E series...
Critical 9.8

Affected Vendor

ACTi Corporation

View all reports →

Affected Software

ACTi D, B, I, and E series cameras
Vulnerable Versions:
A1D-500-V6.11.31-AC

Timeline

Official Publish: December 15th, 2017
Last Modified: August 5th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-598

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.