Description
FLIR thermal traffic cameras contain an unauthenticated vulnerability that allows remote attackers to access live video streams without credentials. Attackers can directly retrieve video streams by accessing specific endpoints like /live.mjpeg, /snapshot.jpg, and RTSP streaming URLs without authentication.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| FLIR | FLIR Thermal Traffic Cameras | 1.01-0bb5b27 | — |
References
- ExploitDB-45537 exploit
- FLIR Official Vendor Homepage product
- Zero Science Lab Disclosure (ZSL-2018-5489) third-party-advisory