CVE-2017-3184 Missing authorization in ACTi D, B, I, and E series cameras
Unauthenticated attackers can access the factory reset page to reset devices, causing denial of service or enabling access via default credentials.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2017-3184?
CVE-2017-3184 is a critical missing authorization vulnerability in ACTi D, B, I, and E series cameras, published on 15 Dec 2017. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
ACTi cameras including the D, B, I, and E series using firmware version A1D-500-V6.11.31-AC fail to properly restrict access to the factory reset page. An unauthenticated, remote attacker can exploit this vulnerability by directly accessing the http://x.x.x.x/setup/setup_maintain_firmware-default.html page. This will allow an attacker to perform a factory reset on the device, leading to a denial of service condition or the ability to make use of default credentials (CVE-2017-3186).
Which versions are affected by CVE-2017-3184?
It affects 1 product.
Products include Acti Camera Firmware.
How do I fix CVE-2017-3184?
No fix has been published for CVE-2017-3184 yet. Limit exposure of the affected software until one is available.
Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.
Is CVE-2017-3184 being exploited?
There is no known exploitation of CVE-2017-3184 in the wild and no public exploit code.
Other vulnerabilities in ACTi D, B, I, and E series cameras
Sources
Also known as GHSA-6qmf-mgwv-p87x.