CVE-2017-20212

FLIR Thermal Camera F/FC/PT/D firmware version 8.0.0.64 contains an information disclosure vulnerability that allows unauthenticated attackers to read arbitrary files through unverified input parameters. Attackers can exploit the /var/www/data/controllers/api/xml.php readFile function to access...

CVE-2017-20215

FLIR Thermal Camera FC-S/PT firmware version 8.0.0.64 contains an authenticated OS command injection vulnerability that allows attackers to execute shell commands with root privileges. Authenticated attackers can inject arbitrary shell commands through unvalidated input parameters to gain complet...

CVE-2017-20216: Improper Neutralization of Special Elements used in an OS Command

FLIR Thermal Camera PT-Series firmware version 8.0.0.64 contains multiple unauthenticated remote command injection vulnerabilities in the controllerFlirSystem.php script. Attackers can execute arbitrary system commands as root by exploiting unsanitized POST parameters in the execFlirSystem functi...

CVE-2017-20215: Improper Neutralization of Special Elements used in an OS Command

FLIR Thermal Camera FC-S/PT firmware version 8.0.0.64 contains an authenticated OS command injection vulnerability that allows attackers to execute shell commands with root privileges. Authenticated attackers can inject arbitrary shell commands through unvalidated input parameters to gain complet...

CVE-2017-20214: Use of Hard-coded Credentials

FLIR Thermal Camera F/FC/PT/D firmware version 8.0.0.64 contains hard-coded SSH credentials that cannot be changed through normal camera operations. Attackers can leverage these persistent, unmodifiable credentials to gain unauthorized remote access to the thermal camera system...

CVE-2017-20213: Missing Authentication for Critical Function

FLIR Thermal Camera F/FC/PT/D Stream firmware version 8.0.0.64 contains an unauthenticated vulnerability that allows remote attackers to access live camera streams without credentials. Attackers can exploit the vulnerability to view unauthorized thermal camera video feeds across multiple camera...

FLIR Thermal Camera Access Control Vulnerability

FLIR Thermal Camera F Series and others are a series of thermal imaging cameras from FLIR, USA. An access control error vulnerability exists in FLIR Thermal Camera F/FC/PT/D Stream version 8.0.0.64, which stems from a lack of authentication and could lead to unauthorized access to the live video...

FLIR Thermal Camera Trust Management Vulnerability

FLIR Thermal Camera F Series and others are a series of thermal imaging cameras from FLIR, USA. A trust management issue vulnerability exists in FLIR Thermal Camera F/FC/PT/D version 8.0.0.64, which stems from the presence of hard-coded SSH credentials that could lead to unauthorized remote acces...

FLIR Thermal Camera: Operating System Command Injection Vulnerability

FLIR Thermal Camera F Series and others are a series of thermal imaging cameras from FLIR Corporation. An operating system command injection vulnerability exists in FLIR Thermal Camera PT-Series version 8.0.0.64, which stems from an uncleaned POST parameter and could lead to a remote command...

FLIR Thermal Camera FC Series and FLIR Thermal Camera PT Series: Operating System Command Injection Vulnerabilities

FLIR Thermal Camera FC Series and FLIR Thermal Camera PT Series are a series of thermal imaging cameras from FLIR Corporation. An operating system command injection vulnerability exists in FLIR Thermal Camera FC Series and FLIR Thermal Camera PT Series version 8.0.0.64, which stems from unvalidat...

PT-2026-1670

Name of the Vulnerable Software and Affected Versions FLIR Thermal Camera PT-Series firmware version 8.0.0.64 Description The FLIR Thermal Camera PT-Series firmware version 8.0.0.64 contains multiple unauthenticated remote command injection issues in the controllerFlirSystem.php script. Attackers...

PT-2026-1669

Name of the Vulnerable Software and Affected Versions FLIR Thermal Camera FC-S/PT firmware version 8.0.0.64 Description The FLIR Thermal Camera FC-S/PT firmware version 8.0.0.64 contains an authenticated OS command injection issue. An attacker with valid credentials can execute shell commands wit...

PT-2026-1668

Name of the Vulnerable Software and Affected Versions FLIR Thermal Camera F/FC/PT/D version 8.0.0.64 Description The FLIR Thermal Camera F/FC/PT/D firmware version 8.0.0.64 includes hard-coded SSH credentials that cannot be altered through standard camera settings. This allows attackers to obtain...

PT-2026-1667

Name of the Vulnerable Software and Affected Versions FLIR Thermal Camera F/FC/PT/D Stream firmware version 8.0.0.64 Description The FLIR Thermal Camera F/FC/PT/D Stream firmware contains an unauthenticated issue that allows remote attackers to access live camera streams without needing...

FLIR Thermal Camera path traversal vulnerability

FLIR Thermal Camera F Series and others are a series of infrared cameras from FLIR Corporation. A path traversal vulnerability exists in FLIR Thermal Camera F/FC/PT/D version 8.0.0.64, which originates from an unvalidated input parameter and could lead to arbitrary file reads...

CVE-2017-20212: Improper Limitation of a Pathname to a Restricted Directory

FLIR Thermal Camera F/FC/PT/D firmware version 8.0.0.64 contains an information disclosure vulnerability that allows unauthenticated attackers to read arbitrary files through unverified input parameters. Attackers can exploit the /var/www/data/controllers/api/xml.php readFile function to access...

CVE-2017-20215 FLIR Thermal Camera FC-S/PT firmware version 8.0.0.64 Authenticated OS Command Injection

FLIR Thermal Camera FC-S/PT firmware version 8.0.0.64 contains an authenticated OS command injection vulnerability that allows attackers to execute shell commands with root privileges. Authenticated attackers can inject arbitrary shell commands through unvalidated input parameters to gain complet...

CVE-2017-20215

CVE-2017-20215 concerns FLIR Thermal Camera FC-S/PT firmware v8.0.0.64 which contains an authenticated OS command injection vulnerability. The underlying issue arises from unvalidated input parameters, enabling an authenticated attacker to execute shell commands with root privileges and gain comp...

CVE-2017-20216

CVE-2017-20216 concerns FLIR Thermal Camera PT-Series firmware 8.0.0.64, where multiple unauthenticated remote command injection vulnerabilities exist in the controllerFlirSystem.php script. The root cause is unsanitized POST parameters in the execFlirSystem() function leading to shell_exec() cal...

CVE-2017-20215 FLIR Thermal Camera FC-S/PT firmware version 8.0.0.64 Authenticated OS Command Injection

FLIR Thermal Camera FC-S/PT firmware version 8.0.0.64 contains an authenticated OS command injection vulnerability that allows attackers to execute shell commands with root privileges. Authenticated attackers can inject arbitrary shell commands through unvalidated input parameters to gain complet...