CVE-2017-20212

🗓️ 07 Jan 2026 23:09:54Reported by VulnCheckType

cve🔗 web.nvd.nist.gov👁 6 Views🌐 WEB

CVE-2017-20212: FLIR camera firmware 8.0.0.64 allows unauthenticated disclosure of files via readFile() in xml.php.

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2017-20212	7 Jan 202623:26	–	circl
CNNVD	FLIR Thermal Camera 路径遍历漏洞	8 Jan 202600:00	–	cnnvd
Cvelist	CVE-2017-20212 FLIR Thermal Camera F/FC/PT/D 8.0.0.64 Information Disclosure via File Reading	7 Jan 202623:09	–	cvelist
NVD	CVE-2017-20212	8 Jan 202600:15	–	nvd
OpenVAS	FLIR Systems Cameras Multiple Vulnerabilities	26 Sep 201700:00	–	openvas
Positive Technologies	PT-2026-1666	8 Jan 202600:00	–	ptsecurity
RedhatCVE	CVE-2017-20212	9 Jan 202608:38	–	redhatcve
Vulnrichment	CVE-2017-20212 FLIR Thermal Camera F/FC/PT/D 8.0.0.64 Information Disclosure via File Reading	7 Jan 202623:09	–	vulnrichment
Zero Science Lab	FLIR Systems FLIR Thermal Camera F/FC/PT/D Multiple Information Disclosures	25 Sep 201700:00	–	zeroscience

Vulners

Node

flir_systems flir_thermal_camera_f/fc/pt/dMatch8.0.0.64

[
  {
    "vendor": "FLIR Systems, Inc.",
    "product": "FLIR Thermal Camera F/FC/PT/D",
    "versions": [
      {
        "version": "8.0.0.64",
        "status": "affected"
      }
    ]
  }
]

Source	Link
zeroscience	www.zeroscience.mk/en/vulnerabilities/ZSL-2017-5434.php
web	www.web.archive.org/web/20171011125811/https://www.flir.com/security/blog/details/
exploit-db	www.exploit-db.com/exploits/42786/
cxsecurity	www.cxsecurity.com/issue/WLB-2017090202
packetstormsecurity	www.packetstormsecurity.com/files/144322

Parameter	Position	Path	Description	CWE
file	query param	api/xml	Unauthenticated information disclosure via unsafely reading local files through the xml.php endpoint.	CWE-22

15 Apr 2026 14:34Current

5.9Medium risk

Vulners AI Score5.9

CVSS 3.16.2

CVSS 48.7

EPSS0.00354

SSVC

CWE-22