acti kayıtları
acti üreticisine ait 6 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer1
- CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')1
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-306 Missing Authentication for Critical Function1
- CWE-521 Weak Password Requirements1
- CWE-598 Use of HTTP Request With Sensitive Query String1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
6 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
41Planlayın | CVE-2017-3186İstismar yok | ACTi cameras including the D, B, I, and E series using firmware version A1D-500-V6.11.31-AC use non-random default credentials across all deacti · camera firmware · CWE-521 | Kritik9,8 | — | %6,1 | 15 Ara 2017 |
41Planlayın | CVE-2017-3184İstismar yok | ACTi cameras including the D, B, I, and E series using firmware version A1D-500-V6.11.31-AC fail to properly restrict access to the factory acti · camera firmware · CWE-306 | Kritik9,8 | — | %5,9 | 15 Ara 2017 |
40Planlayın | CVE-2017-3185İstismar yok | ACTi cameras including the D, B, I, and E series using firmware version A1D-500-V6.11.31-AC have a web application that uses the GET method acti · camera firmware · CWE-598 | Kritik9,8 | — | %3,2 | 15 Ara 2017 |
35İzleyin | CVE-2020-15956Kavram kanıtı | ActiveMediaServer.exe in ACTi NVR3 Standard Server 3.0.12.42 allows remote unauthenticated attackers to trigger a buffer overflow and applicacti · nvr · CWE-120 | Yüksek7,5 | — | %16,2 | 4 Ağu 2020 |
33İzleyin | CVE-2007-4582Kavram kanıtı | Buffer overflow in the nvUnifiedControl.AUnifiedControl.1 ActiveX control in nvUnifiedControl.dll 1.1.45.0 in ACTi Network Video Recorder (Nacti · network video recorder · CWE-119 | Yüksek7,5 | — | %10,0 | 28 Ağu 2007 |
22İzleyin | CVE-2007-4583Kavram kanıtı | Multiple absolute path traversal vulnerabilities in the nvUtility.Utility.1 ActiveX control in nvUtility.dll 1.0.14.0 in ACTi Network Video acti · network video recorder · CWE-22 | Orta5,0 | — | %8,0 | 28 Ağu 2007 |
- CVE-2017-318641Planlayın
ACTi cameras including the D, B, I, and E series using firmware version A1D-500-V6.11.31-AC use non-random default credentials across all de
KritikCVSS 9,8İstismar yokEPSS %6acti · camera firmware15 Ara 2017
- CVE-2017-318441Planlayın
ACTi cameras including the D, B, I, and E series using firmware version A1D-500-V6.11.31-AC fail to properly restrict access to the factory
KritikCVSS 9,8İstismar yokEPSS %6acti · camera firmware15 Ara 2017
- CVE-2017-318540Planlayın
ACTi cameras including the D, B, I, and E series using firmware version A1D-500-V6.11.31-AC have a web application that uses the GET method
KritikCVSS 9,8İstismar yokEPSS %3acti · camera firmware15 Ara 2017
- CVE-2020-1595635İzleyin
ActiveMediaServer.exe in ACTi NVR3 Standard Server 3.0.12.42 allows remote unauthenticated attackers to trigger a buffer overflow and applic
YüksekCVSS 7,5Kavram kanıtıEPSS %16acti · nvr4 Ağu 2020
- CVE-2007-458233İzleyin
Buffer overflow in the nvUnifiedControl.AUnifiedControl.1 ActiveX control in nvUnifiedControl.dll 1.1.45.0 in ACTi Network Video Recorder (N
YüksekCVSS 7,5Kavram kanıtıEPSS %10acti · network video recorder28 Ağu 2007
- CVE-2007-458322İzleyin
Multiple absolute path traversal vulnerabilities in the nvUtility.Utility.1 ActiveX control in nvUtility.dll 1.0.14.0 in ACTi Network Video
OrtaCVSS 5,0Kavram kanıtıEPSS %8acti · network video recorder28 Ağu 2007