Skip to content
OpenAdvisories

Vendor

FLIR Systems

10 known vulnerabilities.

FLIR Systems at a glance

Last 12 months
10
Critical · all time
2
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 3 5 December 2025: 5 vulnerabilities, 1 critical Dec 2025 January 2026: 5 vulnerabilities, 1 critical February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 0 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202600
Aug 202600
Jul 202600
Jun 202600
May 202600
Apr 202600
Mar 202600
Feb 202600
Jan 202651
Dec 202551
Nov 202500
Oct 202500
Sep 202500
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400

Products

FLIR AX8 Thermal Camera 2 FLIR Thermal Camera F/FC/PT/D 2 Thermal Traffic Cameras 1 Brickstream 3D+ 1 FLIR Thermal Camera FC-S/PT 1 FLIR Thermal Camera F/FC/PT/D Stream 1 FLIR Thermal Camera PT-Series 1 FLIR Brickstream 3D+ 1
All Critical High Medium Low Exploited only Public exploit

10 results · Feed

  • High 8.8
    CVE-2017-20215 EPSS 16%

    FLIR Thermal Camera FC-S/PT firmware version 8.0.0.64 Authenticated OS Command Injection

    FLIR Thermal Camera FC-S/PT firmware version 8.0.0.64 contains an authenticated OS command injection vulnerability that allows attackers to execute shell commands with root privileges. Authenticated attackers can inject arbitrary shell commands through unvali…

    FLIR Systems FLIR Thermal Camera FC-S/PT
  • Critical 9.8
    CVE-2017-20216 EPSS 12%

    FLIR Thermal Camera PT-Series firmware version 8.0.0.64 Unauthenticated Remote Command Injection

    FLIR Thermal Camera PT-Series firmware version 8.0.0.64 contains multiple unauthenticated remote command injection vulnerabilities in the controllerFlirSystem.php script. Attackers can execute arbitrary system commands as root by exploiting unsanitized POST p…

    FLIR Systems FLIR Thermal Camera PT-Series
  • High 7.5
    CVE-2017-20213

    FLIR Thermal Camera F/FC/PT/D Stream 8.0.0.64 Unauthenticated Stream Disclosure

    FLIR Thermal Camera F/FC/PT/D Stream firmware version 8.0.0.64 contains an unauthenticated vulnerability that allows remote attackers to access live camera streams without credentials. Attackers can exploit the vulnerability to view unauthorized thermal camer…

    FLIR Systems FLIR Thermal Camera F/FC/PT/D Stream
  • High 7.5
    CVE-2017-20214

    FLIR Thermal Camera F/FC/PT/D firmware version 8.0.0.64 Hard-Coded SSH Credentials Vulnerability

    FLIR Thermal Camera F/FC/PT/D firmware version 8.0.0.64 contains hard-coded SSH credentials that cannot be changed through normal camera operations. Attackers can leverage these persistent, unmodifiable credentials to gain unauthorized remote access to the th…

    FLIR Systems FLIR Thermal Camera F/FC/PT/D
  • Medium 6.2
    CVE-2017-20212

    FLIR Thermal Camera F/FC/PT/D 8.0.0.64 Information Disclosure via File Reading

    FLIR Thermal Camera F/FC/PT/D firmware version 8.0.0.64 contains an information disclosure vulnerability that allows unauthenticated attackers to read arbitrary files through unverified input parameters. Attackers can exploit the /var/www/data/controllers/api…

    FLIR Systems FLIR Thermal Camera F/FC/PT/D
  • High 7.5
    CVE-2018-25139

    FLIR AX8 Thermal Camera 1.32.16 Unauthenticated RTSP Stream Disclosure

    FLIR AX8 Thermal Camera 1.32.16 contains an unauthenticated vulnerability that allows remote attackers to access live video streams without credentials. Attackers can directly connect to the RTSP stream using tools like VLC or FFmpeg to view and record therma…

    FLIR Systems FLIR AX8 Thermal Camera
  • High 7.5
    CVE-2018-25140

    FLIR Thermal Traffic Cameras V1.01-0bb5b27 Unauthenticated Websocket Device Manipulation

    FLIR thermal traffic cameras contain an unauthenticated device manipulation vulnerability in their WebSocket implementation that allows attackers to bypass authentication and authorization controls. Attackers can directly modify device configurations, access …

    FLIR Systems Thermal Traffic Cameras
  • Critical 9.8
    CVE-2018-25138

    FLIR AX8 Thermal Camera 1.32.16 Hard-Coded Credentials Authentication Bypass

    FLIR AX8 Thermal Camera 1.32.16 contains hard-coded SSH and web panel credentials that cannot be changed through normal camera operations. Attackers can exploit these persistent credentials to gain unauthorized shell access and login to multiple camera interf…

    FLIR Systems FLIR AX8 Thermal Camera
  • High 7.5
    CVE-2018-25137

    FLIR Brickstream 3D+ 2.1.742.1842 Unauthenticated Config File Disclosure

    FLIR Brickstream 3D+ 2.1.742.1842 contains an unauthenticated vulnerability in the ExportConfig REST API that allows attackers to download sensitive configuration files. Attackers can exploit the getConfigExportFile.cgi endpoint to retrieve system configurati…

    FLIR Systems FLIR Brickstream 3D+
  • High 7.5
    CVE-2018-25136

    FLIR Brickstream 3D+ 2.1.742.1842 Unauthenticated RTSP Stream Disclosure

    FLIR Brickstream 3D+ 2.1.742.1842 contains an unauthenticated vulnerability that allows remote attackers to access live video streams without credentials. Attackers can retrieve video stream images by directly accessing multiple image endpoints like middleIma…

    FLIR Systems Brickstream 3D+