<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: camera firmware</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2024-26548: An issue in vivotek Network Camera v.FD8166A-VVTK-0204j allows a remote attacker to execute arbitrary code via</title><link>https://patchthecve.com/cve/CVE-2024-26548.html</link><guid>https://patchthecve.com/cve/CVE-2024-26548.html</guid><pubDate>Wed, 17 Jun 2026 07:17:47 +0000</pubDate><description>CRITICAL 9.8: An issue in vivotek Network Camera v.FD8166A-VVTK-0204j allows a remote attacker to execute arbitrary code via a crafted payload to the upload_file.cgi component.</description></item><item><title>CVE-2017-3186: ACTi cameras including the D, B, I, and E series using firmware version A1D-500-V6.11.31-AC use non-random def</title><link>https://patchthecve.com/cve/CVE-2017-3186.html</link><guid>https://patchthecve.com/cve/CVE-2017-3186.html</guid><pubDate>Wed, 17 Jun 2026 01:17:41 +0000</pubDate><description>CRITICAL 9.8: ACTi cameras including the D, B, I, and E series using firmware version A1D-500-V6.11.31-AC use non-random default credentials across all devices. A remote attacker can take complete control of a device using default admin credentials.</description></item><item><title>CVE-2017-3185: ACTi cameras including the D, B, I, and E series using firmware version A1D-500-V6.11.31-AC have a web applica</title><link>https://patchthecve.com/cve/CVE-2017-3185.html</link><guid>https://patchthecve.com/cve/CVE-2017-3185.html</guid><pubDate>Wed, 17 Jun 2026 01:17:41 +0000</pubDate><description>CRITICAL 9.8: ACTi cameras including the D, B, I, and E series using firmware version A1D-500-V6.11.31-AC have a web application that uses the GET method to process requests that contain sensitive information such as user account name and password, which can expose that information through the browser&#x27;s history, </description></item><item><title>CVE-2017-3184: ACTi cameras including the D, B, I, and E series using firmware version A1D-500-V6.11.31-AC fail to properly r</title><link>https://patchthecve.com/cve/CVE-2017-3184.html</link><guid>https://patchthecve.com/cve/CVE-2017-3184.html</guid><pubDate>Wed, 17 Jun 2026 01:17:41 +0000</pubDate><description>CRITICAL 9.8: ACTi cameras including the D, B, I, and E series using firmware version A1D-500-V6.11.31-AC fail to properly restrict access to the factory reset page. An unauthenticated, remote attacker can exploit this vulnerability by directly accessing the http://x.x.x.x/setup/setup_maintain_firmware-default.ht</description></item><item><title>CVE-2017-6343: The web interface on Dahua DHI-HCVR7216A-S3 devices with NVR Firmware 3.210.0001.10 2016-06-06, Camera Firmwar</title><link>https://patchthecve.com/cve/CVE-2017-6343.html</link><guid>https://patchthecve.com/cve/CVE-2017-6343.html</guid><pubDate>Wed, 17 Jun 2026 01:22:11 +0000</pubDate><description>HIGH 8.1: The web interface on Dahua DHI-HCVR7216A-S3 devices with NVR Firmware 3.210.0001.10 2016-06-06, Camera Firmware 2.400.0000.28.R 2016-03-29, and SmartPSS Software 1.16.1 2017-01-19 allows remote attackers to obtain login access by leveraging knowledge of the MD5 Admin Hash without knowledge of the co</description></item><item><title>CVE-2017-6342: An issue was discovered on Dahua DHI-HCVR7216A-S3 devices with NVR Firmware 3.210.0001.10 2016-06-06, Camera F</title><link>https://patchthecve.com/cve/CVE-2017-6342.html</link><guid>https://patchthecve.com/cve/CVE-2017-6342.html</guid><pubDate>Wed, 17 Jun 2026 01:22:11 +0000</pubDate><description>CRITICAL 9.8: An issue was discovered on Dahua DHI-HCVR7216A-S3 devices with NVR Firmware 3.210.0001.10 2016-06-06, Camera Firmware 2.400.0000.28.R 2016-03-29, and SmartPSS Software 1.16.1 2017-01-19. When SmartPSS Software is launched, while on the login screen, the software in the background automatically logs </description></item><item><title>CVE-2017-6341: Dahua DHI-HCVR7216A-S3 devices with NVR Firmware 3.210.0001.10 2016-06-06, Camera Firmware 2.400.0000.28.R 201</title><link>https://patchthecve.com/cve/CVE-2017-6341.html</link><guid>https://patchthecve.com/cve/CVE-2017-6341.html</guid><pubDate>Wed, 17 Jun 2026 01:22:11 +0000</pubDate><description>MEDIUM 5.9: Dahua DHI-HCVR7216A-S3 devices with NVR Firmware 3.210.0001.10 2016-06-06, Camera Firmware 2.400.0000.28.R 2016-03-29, and SmartPSS Software 1.16.1 2017-01-19 send cleartext passwords in response to requests from the Web Page, Mobile Application, and Desktop Application interfaces, which allows remo</description></item></channel></rss>