406 matches found
CVE-2023-51127
CVE-2023-51127 FLIR AX8 thermal sensor cameras up to and including 1.46.16 are vulnerable to Directory Traversal due to improper access restriction. This vulnerability allows an unauthenticated, remote attacker to obtain arbitrary sensitive file contents by uploading a specially crafted symbolic...
CVE-2023-51126
CVE-2023-51126 FLIR AX8 up to 1.46.16 is vulnerable to command injection via /usr/www/res.php. VulnerabilityType Other command injection Vendor of Product FLIR Affected Component in /usr/www/res.php. The parameter value can inject the command and exec it. Attack Type Remote Impact Code execution...
CVE-2024-48762
CVE-2024-48762 Description Command injection vulnerability in /usr/www/application/models/settingscamera.php in FLIR AX8 up to 1.46.16 allows attackers to run arbitrary commands via the value parameter. POC GET /settings/applyfirmware/;idtest123.txt;/false HTTP/1.1 Host: XXXX Response HTTP/1.1 20...
FLIR AX8 1.46.16 - Remote Command Injection
FLIR AX8 version 1.46.16 and below is susceptible to an unauthenticated remote command injection vulnerability.The vulnerability exists in the alarm functionality where user-supplied input in the 'id' parameter is not properly sanitized,allowing attackers to inject and execute arbitrary OS...
CVE-2026-55395
Hardcoded passwords in the access control in Teledyne FLIR Aware2 versions through 6.9.0.2 PackBot and 1.7.9 FirstLook allows remote unauthenticated attackers to access and reconfigure Teledyne FLIR PackBot and FirstLook robots running this software via reading the passwords from the firmware or...
CVE-2026-55396
Cleartext transmission without a cryptographic integrity check in operator control unit to robot UDP traffic in Teledyne FLIR Aware2 versions through 6.9.0.2 PackBot and 1.7.9 FirstLook allows adjacent unauthenticated attackers to intercept, hijack, or modify control traffic against Teledyne FLIR...
CVE-2026-55393
Unvalidated pathnames in the web interface in Teledyne FLIR Aware2 versions through 6.9.0.2 PackBot and 1.7.9 FirstLook allows remote unauthenticated attackers to read configuration and security parameters on Teledyne FLIR PackBot and FirstLook robots running this software via path traversal...
CVE-2026-14983
Missing authentication in the web interface in Teledyne FLIR Aware2 versions through 6.9.0.2 allows remote unauthenticated attackers to achieve denial of service against Teledyne FLIR PackBot robots running this software via misuse of the reboot endpoint...
CVE-2026-14984
Cleartext transmission in the primary control endpoints of Teledyne FLIR Aware2 versions through 6.9.0.2 allows remote unauthenticated attackers to intercept, hijack, or modify session traffic against Teledyne FLIR PackBot robots running this software via sniffing or hijacking network traffic...
EUVD-2026-91053
Cleartext transmission without a cryptographic integrity check in operator control unit to robot UDP traffic in Teledyne FLIR Aware2 versions through 6.9.0.2 PackBot and 1.7.9 FirstLook allows adjacent unauthenticated attackers to intercept, hijack, or modify control traffic against Teledyne FLIR...
CVE-2026-55396
The Teledyne FLIR Aware2 software, specifically in versions through 6.9.0.2 (PackBot) and 1.7.9 (FirstLook) , is vulnerable to the cleartext transmission of UDP traffic from the operator control unit to the robot. Because this traffic lacks a cryptographic integrity check , adjacent unauthenticat...
CVE-2026-55396 Unencrypted UDP Control Traffic in Teledyne FLIR Robots running Aware2
Cleartext transmission without a cryptographic integrity check in operator control unit to robot UDP traffic in Teledyne FLIR Aware2 versions through 6.9.0.2 PackBot and 1.7.9 FirstLook allows adjacent unauthenticated attackers to intercept, hijack, or modify control traffic against Teledyne FLIR...
CVE-2026-55396 Unencrypted UDP Control Traffic in Teledyne FLIR Robots running Aware2
Cleartext transmission without a cryptographic integrity check in operator control unit to robot UDP traffic in Teledyne FLIR Aware2 versions through 6.9.0.2 PackBot and 1.7.9 FirstLook allows adjacent unauthenticated attackers to intercept, hijack, or modify control traffic against Teledyne FLIR...
CVE-2026-55395 Hardcoded Passwords in Teledyne FLIR Robots running Aware2
Hardcoded passwords in the access control in Teledyne FLIR Aware2 versions through 6.9.0.2 PackBot and 1.7.9 FirstLook allows remote unauthenticated attackers to access and reconfigure Teledyne FLIR PackBot and FirstLook robots running this software via reading the passwords from the firmware or...
CVE-2026-55395
Teledyne FLIR Aware2 software (versions through 6.9.0.2 for PackBot and 1.7.9 for FirstLook) contains hardcoded passwords in the access control mechanism. This vulnerability allows remote unauthenticated attackers to access and reconfigure Teledyne FLIR PackBot and FirstLook robots by extracting ...
CVE-2026-55395 Hardcoded Passwords in Teledyne FLIR Robots running Aware2
Hardcoded passwords in the access control in Teledyne FLIR Aware2 versions through 6.9.0.2 PackBot and 1.7.9 FirstLook allows remote unauthenticated attackers to access and reconfigure Teledyne FLIR PackBot and FirstLook robots running this software via reading the passwords from the firmware or...
EUVD-2026-91052
Hardcoded passwords in the access control in Teledyne FLIR Aware2 versions through 6.9.0.2 PackBot and 1.7.9 FirstLook allows remote unauthenticated attackers to access and reconfigure Teledyne FLIR PackBot and FirstLook robots running this software via reading the passwords from the firmware or...
CVE-2026-55394
Teledyne FLIR Aware2 software versions through 6.9.0.2 are vulnerable to unencrypted traffic transmission within the 802.11 network . This flaw allows adjacent unauthenticated attackers to intercept, hijack, or modify session traffic of Teledyne FLIR PackBot robots via network sniffing or hijacki...
EUVD-2026-91051
Unencrypted traffic in the 802.11 network of Teledyne FLIR Aware2 versions through 6.9.0.2 allows adjacent unauthenticated attackers to intercept, hijack, or modify session traffic against Teledyne FLIR PackBot robots running this software via sniffing or hijacking network traffic...
CVE-2026-55394 Unencrypted 802.11 Network in Teledyne FLIR Robots running Aware2
Unencrypted traffic in the 802.11 network of Teledyne FLIR Aware2 versions through 6.9.0.2 allows adjacent unauthenticated attackers to intercept, hijack, or modify session traffic against Teledyne FLIR PackBot robots running this software via sniffing or hijacking network traffic...