CVE-2023-51127

CVE-2023-51127 FLIR AX8 サーモセンサーカメラ（バージョン 1.46.16 までを含む）は、不適切なアクセス制限によりディレクトリトラバーサルに対して脆弱です。この脆弱性により、認証されていないリモート攻撃者が、特別に細工されたシンボリックリンクファイルをアップロードすることで、任意の機密ファイルの内容を取得できる可能性があります。 脆弱性の種類 ディレクトリトラバーサル 製品のベンダー FLIR 攻撃タイプ リモート 影響情報開示 true 参考 https://www.flir.com/ 発見者 Lin Xinkang 氏と Xu Guanhong 氏（武漢大学...

CVE-2017-20216

FLIR Thermal Camera PT-Series firmware version 8.0.0.64 contains multiple unauthenticated remote command injection vulnerabilities in the controllerFlirSystem.php script. Attackers can execute arbitrary system commands as root by exploiting unsanitized POST parameters in the execFlirSystem functi...

CVE-2017-20213

FLIR Thermal Camera F/FC/PT/D Stream firmware version 8.0.0.64 contains an unauthenticated vulnerability that allows remote attackers to access live camera streams without credentials. Attackers can exploit the vulnerability to view unauthorized thermal camera video feeds across multiple camera...

CVE-2017-20212

FLIR Thermal Camera F/FC/PT/D firmware version 8.0.0.64 contains an information disclosure vulnerability that allows unauthenticated attackers to read arbitrary files through unverified input parameters. Attackers can exploit the /var/www/data/controllers/api/xml.php readFile function to access...

CVE-2017-20215

FLIR Thermal Camera FC-S/PT firmware version 8.0.0.64 contains an authenticated OS command injection vulnerability that allows attackers to execute shell commands with root privileges. Authenticated attackers can inject arbitrary shell commands through unvalidated input parameters to gain complet...

CVE-2017-20212

FLIR Thermal Camera F/FC/PT/D firmware version 8.0.0.64 contains an information disclosure vulnerability that allows unauthenticated attackers to read arbitrary files through unverified input parameters. Attackers can exploit the /var/www/data/controllers/api/xml.php readFile function to access...

CVE-2017-20216

FLIR Thermal Camera PT-Series firmware version 8.0.0.64 contains multiple unauthenticated remote command injection vulnerabilities in the controllerFlirSystem.php script. Attackers can execute arbitrary system commands as root by exploiting unsanitized POST parameters in the execFlirSystem functi...

PT-2026-1668

Name of the Vulnerable Software and Affected Versions FLIR Thermal Camera F/FC/PT/D version 8.0.0.64 Description The FLIR Thermal Camera F/FC/PT/D firmware version 8.0.0.64 includes hard-coded SSH credentials that cannot be altered through standard camera settings. This allows attackers to obtain...

PT-2026-1667

Name of the Vulnerable Software and Affected Versions FLIR Thermal Camera F/FC/PT/D Stream firmware version 8.0.0.64 Description The FLIR Thermal Camera F/FC/PT/D Stream firmware contains an unauthenticated issue that allows remote attackers to access live camera streams without needing...

CVE-2017-20214: Use of Hard-coded Credentials

FLIR Thermal Camera F/FC/PT/D firmware version 8.0.0.64 contains hard-coded SSH credentials that cannot be changed through normal camera operations. Attackers can leverage these persistent, unmodifiable credentials to gain unauthorized remote access to the thermal camera system...

CVE-2017-20215: Improper Neutralization of Special Elements used in an OS Command

FLIR Thermal Camera FC-S/PT firmware version 8.0.0.64 contains an authenticated OS command injection vulnerability that allows attackers to execute shell commands with root privileges. Authenticated attackers can inject arbitrary shell commands through unvalidated input parameters to gain complet...

FLIR Thermal Camera 路径遍历漏洞

FLIR Thermal Camera F Series and others are a series of infrared cameras from FLIR Corporation. A path traversal vulnerability exists in FLIR Thermal Camera F/FC/PT/D version 8.0.0.64, which originates from an unvalidated input parameter and could lead to arbitrary file reads...

PT-2026-1669

Name of the Vulnerable Software and Affected Versions FLIR Thermal Camera FC-S/PT firmware version 8.0.0.64 Description The FLIR Thermal Camera FC-S/PT firmware version 8.0.0.64 contains an authenticated OS command injection issue. An attacker with valid credentials can execute shell commands wit...

CVE-2017-20212: Improper Limitation of a Pathname to a Restricted Directory

FLIR Thermal Camera F/FC/PT/D firmware version 8.0.0.64 contains an information disclosure vulnerability that allows unauthenticated attackers to read arbitrary files through unverified input parameters. Attackers can exploit the /var/www/data/controllers/api/xml.php readFile function to access...

CVE-2017-20216: Improper Neutralization of Special Elements used in an OS Command

FLIR Thermal Camera PT-Series firmware version 8.0.0.64 contains multiple unauthenticated remote command injection vulnerabilities in the controllerFlirSystem.php script. Attackers can execute arbitrary system commands as root by exploiting unsanitized POST parameters in the execFlirSystem functi...

FLIR Thermal Camera 操作系统命令注入漏洞

FLIR Thermal Camera F Series and others are a series of thermal imaging cameras from FLIR Corporation. An operating system command injection vulnerability exists in FLIR Thermal Camera PT-Series version 8.0.0.64, which stems from an uncleaned POST parameter and could lead to a remote command...

FLIR Thermal Camera 信任管理问题漏洞

FLIR Thermal Camera F Series and others are a series of thermal imaging cameras from FLIR, USA. A trust management issue vulnerability exists in FLIR Thermal Camera F/FC/PT/D version 8.0.0.64, which stems from the presence of hard-coded SSH credentials that could lead to unauthorized remote acces...

CVE-2017-20213: Missing Authentication for Critical Function

FLIR Thermal Camera F/FC/PT/D Stream firmware version 8.0.0.64 contains an unauthenticated vulnerability that allows remote attackers to access live camera streams without credentials. Attackers can exploit the vulnerability to view unauthorized thermal camera video feeds across multiple camera...

FLIR Thermal Camera 访问控制错误漏洞

FLIR Thermal Camera F Series and others are a series of thermal imaging cameras from FLIR, USA. An access control error vulnerability exists in FLIR Thermal Camera F/FC/PT/D Stream version 8.0.0.64, which stems from a lack of authentication and could lead to unauthorized access to the live video...

CVE-2017-20215 FLIR Thermal Camera FC-S/PT firmware version 8.0.0.64 Authenticated OS Command Injection

FLIR Thermal Camera FC-S/PT firmware version 8.0.0.64 contains an authenticated OS command injection vulnerability that allows attackers to execute shell commands with root privileges. Authenticated attackers can inject arbitrary shell commands through unvalidated input parameters to gain complet...