FLIR Thermal Traffic Cameras 1.01-0bb5b27 - RTSP Stream Disclosure

FLIR Thermal Traffic Cameras 1.01-0bb5b27 - RTSP Stream Disclosure Exploit Title: FLIR Thermal Traffic Cameras 1.01-0bb5b27 - RTSP Stream Disclosure Author: Gjoko 'LiquidWorm' Krstic Date: 2018-10-06 Vendor: https://www.flir.com Link: https://www.flir.com/security/best-practices-for-cybersecurity...

FLIR Systems FLIR Thermal Traffic Cameras RTSP Stream Disclosure

Summary FLIR TrafiOne is an all-round detection sensor for traffic monitoring and dynamic traffic signal control. Offered in a compact and affordable package, the FLIR TrafiOne uses thermal imaging and Wi-Fi technology to adapt traffic signals based on the presence detection of vehicles, bicycles...

FLIR Systems FLIR Thermal Traffic Cameras Websocket Device Manipulation

Summary FLIR TrafiOne is an all-round detection sensor for traffic monitoring and dynamic traffic signal control. Offered in a compact and affordable package, the FLIR TrafiOne uses thermal imaging and Wi-Fi technology to adapt traffic signals based on the presence detection of vehicles, bicycles...

FLIR Thermal Traffic Cameras 1.01-0bb5b27 - RTSP Stream Disclosure

Exploit Title: FLIR Thermal Traffic Cameras 1.01-0bb5b27 - RTSP Stream Disclosure Author: Gjoko 'LiquidWorm' Krstic Date: 2018-10-06 Vendor: https://www.flir.com Link: https://www.flir.com/security/best-practices-for-cybersecurity/ CVE: N/A Tested on: nginx/1.12.1, nginx/1.10.2, nginx/1.8.0,...

FLIR FX / Lorex video stream hijack: Disclosure train wreck

We found that anyone could access any video stream for certain Swann wireless home security cameras. The technical detail is here. It was a consequence of weak authorisation by the cloud service provider, Ozvision. They claim to provide the back end to 3 million cameras, so we started looking at...

Hacking Swann & FLIR/Lorex home security camera video

A few weeks back we read a story on the BBC web site about a BBC employee seeing someone else’s video footage on the mobile app for their home security camera. It wasn’t clear how this happened, but we were intrigued, so we bought several of the cameras in question to see for ourselves. We put a...

FLIR Brickstream 2300 Access Control Error Vulnerability

The FLIR Brickstream 2300 is a customer flow analysis and statistics device from FLIR Canada. An access control error vulnerability exists in the getConfigExportFile.cgi file in the FLIR Brickstream 2300 version 2.0 4.1.53.166. An attacker could exploit this vulnerability to obtain information...

Flir Brickstream Sensors Detection

Detection of running version of Flir Brickstream Sensors. This script sends an HTTP GET request and tries to get the version from the response. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective righ...

Flir Brickstream Sensors Incorrect Access Control Vulnerability (Aug 2018) - Active Check

Flir Brickstream Sensor is prone to an incorrect access control vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2018-3813

getConfigExportFile.cgi on FLIR Brickstream 2300 devices 2.0 4.1.53.166 has Incorrect Access Control, as demonstrated by reading the AVIUSERID and AVIUSERPASSWORD fields via a direct request...

Design/Logic Flaw

getConfigExportFile.cgi on FLIR Brickstream 2300 devices 2.0 4.1.53.166 has Incorrect Access Control, as demonstrated by reading the AVIUSERID and AVIUSERPASSWORD fields via a direct request...

CVE-2018-3813

getConfigExportFile.cgi on FLIR Brickstream 2300 devices 2.0 4.1.53.166 has Incorrect Access Control, as demonstrated by reading the AVIUSERID and AVIUSERPASSWORD fields via a direct request...

CVE-2018-3813

The CVE-2018-3813 entry applies to FLIR Brickstream 2300 devices, where the getConfigExportFile.cgi interface exposes an incorrect access control vulnerability. The affected component is the getConfigExportFile.cgi handler on Brickstream 2300 devices version 2.0 with firmware 4.1.53.166, enabling...

PT-2018-16208

Name of the Vulnerable Software and Affected Versions FLIR Brickstream 2300 devices versions 2.0 through 4.1.53.166 Description The issue concerns incorrect access control, allowing unauthorized reading of sensitive fields via a direct request. Specifically, the AVI USER ID and AVI USER PASSWORD...

CVE-2018-3813: Exposure of Sensitive Information to an Unauthorized Actor

getConfigExportFile.cgi on FLIR Brickstream 2300 devices 2.0 4.1.53.166 has Incorrect Access Control, as demonstrated by reading the AVIUSERID and AVIUSERPASSWORD fields via a direct request...

FLIR Thermal Camera Information Disclosure

An information disclosure vulnerability exists in FLIR Thermal cameras. Successful exploitation of this vulnerability would allow remote attackers to gain access to sensitive information and gain unauthorized access into the affected system...

FLIR Thermal Camera Remote Code Execution

A remote code execution vulnerability exists in FLIR Thermal cameras. A remote attacker can exploit this weakness to execute arbitrary code in the affected router via a crafted request...

FLIR Systems Multiple Vulnerabilities

Vulnerabilities Summary The following advisory describes 5 five vulnerabilities found in FLIR Systems FLIR Thermal/Infrared Camera FC-Series S, FC-Series ID, PT-Series. FLIR – “Best-in-class thermal cameras with on-board analytics for high-performance intrusion detection. The new FC-Series ID...

FLIR Systems FLIR Thermal Camera F/FC/PT/D Stream Disclosure Vulnerability

Exploit for hardware platform in category web applications FLIR Systems FLIR Thermal Camera F/FC/PT/D Stream Disclosure Vendor: FLIR Systems, Inc. Product web page: http://www.flir.com Affected version: Firmware version: 8.0.0.64 Software version: 10.0.2.43 Release: 1.4.1, 1.4, 1.3.4 GA, 1.3.3 GA...

FLIR Systems FLIR Thermal Camera PT-Series (PT-334 200562) Remote Root Exploit

FLIR Camera PT-Series suffers from multiple unauthenticated remote command injection vulnerabilities. The vulnerability exist due to several POST parameters in controllerFlirSystem.php script when calling the execFlirSystem function not being sanitized when using the shellexec PHP function while...