Mandar Jadhav

The web application in the affected cameras uses the GET method to process requests containing sensitive information, such as `user account name` and `password`. This can expose the sensitive information through the browser's history, referrers, web logs, and other sources.

A Use of Hard-Coded Cryptographic Key issue was discovered, where the device utilizes hard-coded private cryptographic keys. This may allow an attacker to decrypt traffic from any other source.

The issue is related to the use of non-random default credentials across all devices. A remote attacker can take complete control of a device using default admin credentials. This allows an attacker to gain access to the device with admin rights.

The issue is related to inadequate access control in the firmware of ACTi cameras, which can be exploited by a remote attacker. By directly accessing the "http://x.x.x.x/setup/setup maintain firmware-default.html" page, an attacker can perform a factory reset on the device. This can lead to a denial of service condition or allow the attacker to access the device using default credentials.

The issue allows remote attackers to defeat cryptographic protection mechanisms by leveraging knowledge of a hardcoded private key from another installation. This is possible because the same private key is used across different customers' installations.

The issue concerns the password-recovery feature, which allows remote attackers to discover the cleartext administrator password by reading the HTML source code of the "cgi-bin/passrec.asp" page.