Description
FLIR Thermal Camera F/FC/PT/D firmware version 8.0.0.64 contains hard-coded SSH credentials that cannot be changed through normal camera operations. Attackers can leverage these persistent, unmodifiable credentials to gain unauthorized remote access to the thermal camera system.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| FLIR Systems | FLIR Thermal Camera F/FC/PT/D | 8.0.0.64 | — |
References
- Zero Science Lab Vulnerability Advisory third-party-advisory
- Exploit Database Entry 42787 exploit
- Packet Storm Security Exploit Archive exploit
- CXSecurity Vulnerability Listing third-party-advisory
- Archived FLIR Security Advisory vendor-advisory patch