Description
ACTi cameras including the D, B, I, and E series using firmware version A1D-500-V6.11.31-AC have a web application that uses the GET method to process requests that contain sensitive information such as user account name and password, which can expose that information through the browser's history, referrers, web logs, and other sources.
Scores
CVSS v3
9.8
EPSS
0.0171
EPSS Percentile
82.4%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-200
CWE-598
Status
published
Products (2)
acti/camera_firmware
a1d-500-v6.11.31-ac
ACTi Corporation/ACTi D, B, I, and E series cameras
A1D-500-V6.11.31-AC
Published
Dec 16, 2017
Tracked Since
Feb 18, 2026