What’s Vulnerable › Vulnerabilities

CVE-2017-3186

• Severity: critical (CVSS 9.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 6.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-12-16 · updated 2026-06-17
• Weakness: CWE-521

Description

ACTi cameras including the D, B, I, and E series using firmware version A1D-500-V6.11.31-AC use non-random default credentials across all devices. A remote attacker can take complete control of a device using default admin credentials.

Affected products

• Acti Camera Firmware: a1d-500-v6.11.31-ac

References

• http://www.securityfocus.com/bid/96720/info
• https://twitter.com/Hfuhs/status/839252357221330944
• https://twitter.com/hack3rsca/status/839599437907386368
• https://www.kb.cert.org/vuls/id/355151
• http://www.securityfocus.com/bid/96720/info
• https://twitter.com/Hfuhs/status/839252357221330944
• https://twitter.com/hack3rsca/status/839599437907386368
• https://www.kb.cert.org/vuls/id/355151

Get alerted when CVE-2017-3186 or the next vulnerability affects your stack