Skip to content
OpenAdvisories

Vendor

FLIR Systems

11 known vulnerabilities.

Products

FLIR AX8 Thermal Camera 2 FLIR Thermal Camera F/FC/PT/D 2 Thermal Traffic Cameras 1 Brickstream 3D+ 1 FLIR Thermal Camera FC-S/PT 1 FLIR Thermal Camera F/FC/PT/D Stream 1 FLIR Thermal Traffic Cameras 1 FLIR Thermal Camera PT-Series 1 FLIR Brickstream 3D+ 1
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • High 8.8
    CVE-2017-20215 EPSS 16%

    FLIR Thermal Camera FC-S/PT firmware version 8.0.0.64 Authenticated OS Command Injection

    FLIR Thermal Camera FC-S/PT firmware version 8.0.0.64 contains an authenticated OS command injection vulnerability that allows attackers to execute shell commands with root privileges. Authenticated attackers can inject arbitrary shell commands through unvali…

    FLIR Systems FLIR Thermal Camera FC-S/PT
  • High 7.5
    CVE-2017-20213

    FLIR Thermal Camera F/FC/PT/D Stream 8.0.0.64 Unauthenticated Stream Disclosure

    FLIR Thermal Camera F/FC/PT/D Stream firmware version 8.0.0.64 contains an unauthenticated vulnerability that allows remote attackers to access live camera streams without credentials. Attackers can exploit the vulnerability to view unauthorized thermal camer…

    FLIR Systems FLIR Thermal Camera F/FC/PT/D Stream
  • High 7.5
    CVE-2017-20214

    FLIR Thermal Camera F/FC/PT/D firmware version 8.0.0.64 Hard-Coded SSH Credentials Vulnerability

    FLIR Thermal Camera F/FC/PT/D firmware version 8.0.0.64 contains hard-coded SSH credentials that cannot be changed through normal camera operations. Attackers can leverage these persistent, unmodifiable credentials to gain unauthorized remote access to the th…

    FLIR Systems FLIR Thermal Camera F/FC/PT/D
  • High 7.5
    CVE-2018-25141

    FLIR Thermal Traffic Cameras V1.01-0bb5b27 Unauthenticated RTSP Stream Disclosure

    FLIR thermal traffic cameras contain an unauthenticated vulnerability that allows remote attackers to access live video streams without credentials. Attackers can directly retrieve video streams by accessing specific endpoints like /live.mjpeg, /snapshot.jpg,…

    FLIR Systems FLIR Thermal Traffic Cameras
  • High 7.5
    CVE-2018-25139

    FLIR AX8 Thermal Camera 1.32.16 Unauthenticated RTSP Stream Disclosure

    FLIR AX8 Thermal Camera 1.32.16 contains an unauthenticated vulnerability that allows remote attackers to access live video streams without credentials. Attackers can directly connect to the RTSP stream using tools like VLC or FFmpeg to view and record therma…

    FLIR Systems FLIR AX8 Thermal Camera
  • High 7.5
    CVE-2018-25140

    FLIR Thermal Traffic Cameras V1.01-0bb5b27 Unauthenticated Websocket Device Manipulation

    FLIR thermal traffic cameras contain an unauthenticated device manipulation vulnerability in their WebSocket implementation that allows attackers to bypass authentication and authorization controls. Attackers can directly modify device configurations, access …

    FLIR Systems Thermal Traffic Cameras
  • High 7.5
    CVE-2018-25137

    FLIR Brickstream 3D+ 2.1.742.1842 Unauthenticated Config File Disclosure

    FLIR Brickstream 3D+ 2.1.742.1842 contains an unauthenticated vulnerability in the ExportConfig REST API that allows attackers to download sensitive configuration files. Attackers can exploit the getConfigExportFile.cgi endpoint to retrieve system configurati…

    FLIR Systems FLIR Brickstream 3D+
  • High 7.5
    CVE-2018-25136

    FLIR Brickstream 3D+ 2.1.742.1842 Unauthenticated RTSP Stream Disclosure

    FLIR Brickstream 3D+ 2.1.742.1842 contains an unauthenticated vulnerability that allows remote attackers to access live video streams without credentials. Attackers can retrieve video stream images by directly accessing multiple image endpoints like middleIma…

    FLIR Systems Brickstream 3D+