CVE-2017-3186

CVE-2017-3186 describes a critical vulnerability affecting ACTi D, B, I, and E series cameras running firmware A1D-500-V6.11.31-AC, where devices utilize non-random, default administrative credentials. This allows a remote attacker to gain complete control over affected cameras with low attack complexity. The vulnerability carries a CVSS score of 9.8 (Critical) due to its network-based attack vector, requiring no user interaction and leading to high impacts on confidentiality, integrity, and availability. While not listed in CISA's KEV catalog, its high FAUCET Risk Score of 96/100 and significant community discussion (10 mentions) indicate considerable concern, despite no public exploit code (Metasploit, Nuclei, ExploitDB) or media coverage.