CVE-2017-3186
UnknownEPSS 6.08%
Last modified
CVE-2017-3186 is a vulnerability of currently unknown severity. ACTi cameras including the D, B, I, and E series using firmware version A1D-500-V6.11.31-AC use non-random default credentials across all devices. A remote attacker can take complete control of a device using default admin credentials.. EPSS estimates a 6.08% chance of exploitation in the next 30 days.
Description
ACTi cameras including the D, B, I, and E series using firmware version A1D-500-V6.11.31-AC use non-random default credentials across all devices. A remote attacker can take complete control of a device using default admin credentials.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Acti | Camera Firmware | a1d-500-v6.11.31-ac |
References
- http://www.securityfocus.com/bid/96720/infoThird Party Advisory, VDB Entry
- https://twitter.com/Hfuhs/status/839252357221330944Press/Media Coverage
- https://twitter.com/hack3rsca/status/839599437907386368Press/Media Coverage
- https://www.kb.cert.org/vuls/id/355151Third Party Advisory, US Government Resource
- http://www.securityfocus.com/bid/96720/infoThird Party Advisory, VDB Entry
- https://twitter.com/Hfuhs/status/839252357221330944Press/Media Coverage
- https://twitter.com/hack3rsca/status/839599437907386368Press/Media Coverage
- https://www.kb.cert.org/vuls/id/355151Third Party Advisory, US Government Resource
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2017-3186?
ACTi cameras including the D, B, I, and E series using firmware version A1D-500-V6.11.31-AC use non-random default credentials across all devices. A remote attacker can take complete control of a device using default admin credentials.
How severe is CVE-2017-3186?
Severity scoring for CVE-2017-3186 is pending analysis. The EPSS model estimates a 6.08% probability of exploitation in the next 30 days.
How do I fix CVE-2017-3186?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
Are you affected by CVE-2017-3186?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST