Directory traversal

2024-01-1021:15:00

PRIOn knowledge base

www.prio-n.com

flir ax8

cameras

vulnerability

directory traversal

access restriction

remote attacker

sensitive file contents

symbolic link file

nvd

7.2 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

45.2%

JSON

FLIR AX8 thermal sensor cameras up to and including 1.46.16 are vulnerable to Directory Traversal due to improper access restriction. This vulnerability allows an unauthenticated, remote attacker to obtain arbitrary sensitive file contents by uploading a specially crafted symbolic link file.

CPENameOperatorVersion
flir_ax8_firmwareeq1.46.16

CPE	Name	Operator	Version
	flir_ax8_firmware	eq	1.46.16

References

github.com/risuxx/CVE-2023-51127