CVE-2017-3184

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

ACTi cameras including the D, B, I, and E series using firmware version A1D-500-V6.11.31-AC fail to properly restrict access to the factory reset page. An unauthenticated, remote attacker can exploit this vulnerability by directly accessing the http://x.x.x.x/setup/setup_maintain_firmware-default.html page. This will allow an attacker to perform a factory reset on the device, leading to a denial of service condition or the ability to make use of default credentials (CVE-2017-3186).

Metrics

CVSS 3.0 9.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-306 CWE-798

Affected software

Vendor	Product	Versions
ACTi Corporation	ACTi D, B, I, and E series cameras	A1D-500-V6.11.31-AC

References

http://www.securityfocus.com/bid/96720/infoThird Party Advisory, VDB Entry
https://twitter.com/Hfuhs/status/839252357221330944Press/Media Coverage, Third Party Advisory
https://twitter.com/hack3rsca/status/839599437907386368Press/Media Coverage, Third Party Advisory
https://www.kb.cert.org/vuls/id/355151Third Party Advisory, US Government Resource
http://www.securityfocus.com/bid/96720/infoThird Party Advisory, VDB Entry
https://twitter.com/Hfuhs/status/839252357221330944Press/Media Coverage, Third Party Advisory
https://twitter.com/hack3rsca/status/839599437907386368Press/Media Coverage, Third Party Advisory
https://www.kb.cert.org/vuls/id/355151Third Party Advisory, US Government Resource

Timeline

Published: Dec 16, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-31859.8ACTi cameras including the D, B, I, and E series using firmware version A1D-500-V6.11.31-AC have a web application that uses the GET method CVE-2017-31869.8ACTi cameras including the D, B, I, and E series using firmware version A1D-500-V6.11.31-AC use non-random default credentials across all de CVE-2017-31878.8The dotCMS administration panel, versions 3.7.1 and earlier, are vulnerable to cross-site request forgery. The dotCMS administrator panel co CVE-2017-31886.5The dotCMS administration panel, versions 3.7.1 and earlier, "Push Publishing" feature in Enterprise Pro is vulnerable to path traversal. Wh CVE-2017-31898.1The dotCMS administration panel, versions 3.7.1 and earlier, "Push Publishing" feature in Enterprise Pro is vulnerable to arbitrary file upl CVE-2017-31907.5Flash Seats Mobile App for Android version 1.7.9 and earlier and for iOS version 1.9.51 and earlier fails to properly validate SSL certifica CVE-2017-31919.8D-Link DIR-130 firmware version 1.23 and DIR-330 firmware version 1.12 are vulnerable to authentication bypass of the remote login page. A r CVE-2017-31929.8D-Link DIR-130 firmware version 1.23 and DIR-330 firmware version 1.12 do not sufficiently protect administrator credentials. The tools_admi CVE-2017-31938.8Multiple D-Link devices including the DIR-850L firmware versions 1.14B07 and 2.07.B05 contain a stack-based buffer overflow vulnerability in CVE-2017-31948.1Pandora iOS app prior to version 8.3.2 fails to properly validate SSL certificates provided by HTTPS connections, which may enable an attack CVE-2017-31959.8Commvault Edge Communication Service (cvd) prior to version 11 SP7 or version 11 SP6 with hotfix 590 is prone to a stack-based buffer overfl CVE-2017-31967.8PCAUSA Rawether framework does not properly validate BPF data, allowing a crafted malicious BPF program to perform operations on memory outs