CVE-2017-3186CWE-521

ACTi cameras including the D, B, I, and E series using firmware version A1D-500-V6.11.31-AC use non-random default credentials across all devices

published December 15, 2017

CVSS
โ€”
EPSS
6%
Percentile
93.4
In the wild
Unconfirmed
What it is

๐Ÿšจ Default credentials ship with every ACTi camera, leaving your home security wide open for a remote attacker! ๐Ÿ”ฅ Think of it like leaving your front door unlocked with a sign that says "The key is under the mat!" โ€“ anyone could walk in and take control of your security system without breaking a sweat. An attacker could remotely access your camera, spying on your home or business, potentially capturing sensitive information or compromising your security. Imagine someone watching your every move, all because of a minor oversight during installation!

Put simply

Think of it like leaving your front door unlocked with a sign that says "The key is under the mat!" โ€“ anyone could walk in and take control of your security system without breaking a sweat. The vulnerability lies in the use of non-random default credentials across ACTi cameras, allowing any remote attacker to gain admin control by simply using the default admin login.

What to do

An attacker could remotely access your camera, spying on your home or business, potentially capturing sensitive information or compromising your security. Imagine someone watching your every move, all because of a minor oversight during installation! Change the default admin credentials to strong, unique passwords immediately. Regularly update the camera firmware to the latest version and audit your device settings for any additional security measures. You've got this! By following these steps, you'll boost your camera security in no time! ๐Ÿ›ก๏ธ

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06085 ยท 93.4th percentile
Weakness
CWE-521 ยท Weak Password Requirements
Published
2017-12-15T14:00Z
EPSS history
Timeline
  • 15 DEC 14:00Z
    ACTi cameras including the D, B, I, and E series using firmware version A1D-500-V6.11.31-AC use non-random default credentials across all devices
    cvelistv5