CVE-2025-7577

CVE-2025-7577 affects Teledyne FLIR FB-Series O and FLIR FH-Series ID, version 1.3.2.16. The root cause is a hard-coded password that enables a remote attack. Documented impact indicates potential exposure of credentials and partial confidentiality impact, with attack vector over the network and ...

CVE-2025-7577: Use of Hard-coded Password

A vulnerability was found in Teledyne FLIR FB-Series O and FLIR FH-Series ID 1.3.2.16. It has been classified as problematic. This affects an unknown part. The manipulation leads to use of hard-coded password. It is possible to initiate the attack remotely. The complexity of an attack is rather...

Teledyne FLIR FB-Series O和Teledyne FLIR FH-Series ID 安全漏洞

The Teledyne FLIR FB-Series O and Teledyne FLIR FH-Series ID are both a series of thermal imaging cameras from Teledyne FLIR USA. A security vulnerability exists in Teledyne FLIR FB-Series O and Teledyne FLIR FH-Series ID version 1.3.2.16, which stems from the use of hard-coded passwords...

PT-2025-29426 · Teledyne Flir · Teledyne Flir Fb-Series O +1

Name of the Vulnerable Software and Affected Versions: Teledyne FLIR FB-Series O versions 1.3.2.16 Teledyne FLIR FH-Series versions 1.3.2.16 Description: A critical issue exists in Teledyne FLIR FB-Series O and FLIR FH-Series. The vulnerability is related to improper access controls within the...

CVE-2025-7576: Improper Access Control

A vulnerability was found in Teledyne FLIR FB-Series O and FLIR FH-Series ID 1.3.2.16 and classified as critical. Affected by this issue is some unknown functionality of the file /priv/production/production.html of the component Production Tools. The manipulation leads to improper access controls...

CVE-2025-7578: Improper Neutralization of Special Elements used in a Command

A vulnerability was found in Teledyne FLIR FB-Series O and FLIR FH-Series ID 1.3.2.16. It has been declared as critical. This vulnerability affects the function sendCommand of the file runcmd.sh. The manipulation of the argument cmd leads to command injection. The attack can be initiated remotely...

CVE-2022-35911

On Patlite NH-FB series devices through 1.46, remote attackers can cause a denial of service by omitting the query string. NOTE: the vendor's perspective is that "omitting the query string does not cause a denial of service and the indicated event can not be reproduced...

CVE-2022-35911

Summary (CVE-2022-35911): Patlite NH-FB series devices up to firmware 1.46 are affected. The issue is described as a remote-denial-of-service condition triggered by omitting the query string in requests, though vendor notes dispute the DoS effect and indicate the event may not be reproducible. Pu...

CVE-2022-35911: Improper Restriction of Operations within the Bounds of a Memory Buffer

On Patlite NH-FB series devices through 1.46, remote attackers can cause a denial of service by omitting the query string. NOTE: the vendor's perspective is that "omitting the query string does not cause a denial of service and the indicated event can not be reproduced...

Weak password vulnerability in FB-Series

FLIR Systems, Inc. specializes in the design, development, production, marketing and promotion of specialized technologies for enhanced situational awareness. Through thermal imaging, visible light imaging, video analytics, measurement and diagnostics, and advanced threat detection systems, we...

CVE-2018-18473: Use of Hard-coded Credentials

A hidden backdoor on PATLITE NH-FB Series devices with firmware version 1.45 or earlier, NH-FV Series devices with firmware version 1.10 or earlier, and NBM Series devices with firmware version 1.09 or earlier allow attackers to enable an SSH daemon via the "kankichi" or "kamiyo4" password to the...