vulnwire
9.8crit

CVE-2017-3185

ACTi cameras including the D, B, I, and E series using firmware version A1D-500-V6.11.31-AC have a web application that uses the GET method…

Published 8 y ago · modified 4 mo ago · JSON

CVSS
9.8
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
3.2%
percentile 88%
Public exploits
0
none known

ACTi cameras including the D, B, I, and E series using firmware version A1D-500-V6.11.31-AC have a web application that uses the GET method to process requests that contain sensitive information such as user account name and password, which can expose that information through the browser's history, referrers, web logs, and other sources.

Exploit prediction (EPSS)

3.22% probability of exploitation in the next 30 days, higher than 88% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD3.09.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD2.05.0AV:N/AC:L/Au:N/C:P/I:N/A:N

Affected products

  • ACTi Corporation ACTi D, B, I, and E series cameras

Classification

Weakness
  • CWE-598 Use of HTTP Request With Sensitive Query String
  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

References

  • twitter.com /hack3rsca/status/839599437907386368 · x_refsource_MISC, x_transferred
  • securityfocus.com /bid/96720/info · vdb-entry, x_refsource_BID, x_transferred
  • twitter.com /Hfuhs/status/839252357221330944 · x_refsource_MISC, x_transferred
  • kb.cert.org /vuls/id/355151 · third-party-advisory, x_refsource_CERT-VN, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.