FLIR kayıtları
flir üreticisine ait 17 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 1 · %5,9
- Pre-auth RCE
- 4
- Düzeltme kaydı olan
- %35,3
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')3
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor2
- CWE-306 Missing Authentication for Critical Function2
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-266 Incorrect Privilege Assignment1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
17 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
69Bu hafta | CVE-2022-37061Silahlaştırılmış | All FLIR AX8 thermal sensor cameras version up to and including 1.46.16 are vulnerable to Remote Command Injection.flir · flir ax8 firmware · CWE-78 | Kritik9,8 | — | %99,6 | 18 Ağu 2022 |
48Planlayın | CVE-2023-51126Kavram kanıtı | Command injection vulnerability in /usr/www/res.php in FLIR AX8 up to 1.46.16 allows attackers to run arbitrary commands via the value paramflir · flir ax8 firmware · CWE-77 | Kritik9,8 | — | %31,1 | 10 Oca 2024 |
40Planlayın | CVE-2023-29861İstismar yok | An issue found in FLIR-DVTEL version not specified allows a remote attacker to execute arbitrary code via a crafted request to the managemenflir · dvtel camera firmware · CWE-94 | Kritik9,8 | — | %1,8 | 15 May 2023 |
39İzleyin | CVE-2018-3813İstismar yok | getConfigExportFile.cgi on FLIR Brickstream 2300 devices 2.0 4.1.53.166 has Incorrect Access Control, as demonstrated by reading the AVI_USEflir · brickstream 2300 2d firmware · CWE-200 | Kritik9,8 | — | %1,2 | 1 Oca 2018 |
37İzleyin | CVE-2018-25138İstismar yok | FLIR AX8 Thermal Camera 1.32.16 Hard-Coded Credentials Authentication Bypassflir · flir ax8 firmware · CWE-798 | Kritik9,3 | — | %0,6 | 24 Ara 2025 |
36İzleyin | CVE-2022-37060İstismar yok | FLIR AX8 thermal sensor cameras version up to and including 1.46.16 is vulnerable to Directory Traversal due to an improper access restrictiflir · flir ax8 firmware · CWE-22 | Yüksek7,5 | — | %18,4 | 18 Ağu 2022 |
34İzleyin | CVE-2018-25139İstismar yok | FLIR AX8 Thermal Camera 1.32.16 Unauthenticated RTSP Stream Disclosureflir · flir ax8 firmware · CWE-306 | Yüksek8,7 | — | %0,5 | 24 Ara 2025 |
31İzleyin | CVE-2022-37062İstismar yok | All FLIR AX8 thermal sensor cameras version up to and including 1.46.16 are affected by an insecure design vulnerability due to an improper flir · flir ax8 firmware · CWE-306 | Yüksek7,5 | — | %3,2 | 18 Ağu 2022 |
31İzleyin | CVE-2018-12920İstismar yok | Brickstream 2300 devices allow remote attackers to obtain potentially sensitive information via a direct request for the basic.html#ipsettinflir · brickstream 2300 firmware · CWE-200 | Yüksek7,5 | — | %1,8 | 28 Haz 2018 |
30İzleyin | CVE-2025-5126İstismar yok | Teledyne FLIR AX8 settingsregional.php setDataTime command injectionflir · flir ax8 firmware · CWE-74 | Yüksek7,4 | — | %4,8 | 24 May 2025 |
30İzleyin | CVE-2023-51127Kavram kanıtı | FLIR AX8 thermal sensor cameras up to and including 1.46.16 are vulnerable to Directory Traversal due to improper access restriction.flir · flir ax8 firmware · CWE-22 | Yüksek7,5 | — | %1,3 | 10 Oca 2024 |
23İzleyin | CVE-2022-4364İstismar yok | Teledyne FLIR AX8 Web Service palette.php command injectionflir · flir ax8 firmware · CWE-74 | Orta5,5 | — | %4,3 | 8 Ara 2022 |
21İzleyin | CVE-2022-37063İstismar yok | All FLIR AX8 thermal sensor cameras versions up to and including 1.46.16 are vulnerable to Cross Site Scripting (XSS) due to improper input flir · flir ax8 firmware · CWE-79 | Orta5,4 | — | %1,6 | 18 Ağu 2022 |
15İzleyin | CVE-2024-3013İstismar yok | Teledyne FLIR AX8 User Registration test_login.php improper authorizationflir · flir ax8 firmware · CWE-266 | Düşük2,1 | — | %23,0 | 27 Mar 2024 |
10İzleyin | CVE-2025-5695İstismar yok | Teledyne FLIR AX8 Backend subscriptions.php subscribe_to_alarm command injectionflir · flir ax8 firmware · CWE-74 | Düşük2,0 | — | %7,3 | 5 Haz 2025 |
8İzleyin | CVE-2025-5127İstismar yok | Teledyne FLIR AX8 prod.php cross site scriptingflir · flir ax8 firmware · CWE-79 | Düşük2,0 | — | %0,8 | 24 May 2025 |
8İzleyin | CVE-2025-6266İstismar yok | Teledyne FLIR AX8 upload.php unrestricted uploadflir · flir ax8 firmware · CWE-284 | Düşük2,1 | — | %0,5 | 19 Haz 2025 |
- CVE-2022-3706169Bu hafta
All FLIR AX8 thermal sensor cameras version up to and including 1.46.16 are vulnerable to Remote Command Injection.
KritikCVSS 9,8SilahlaştırılmışEPSS %100flir · flir ax8 firmware18 Ağu 2022
- CVE-2023-5112648Planlayın
Command injection vulnerability in /usr/www/res.php in FLIR AX8 up to 1.46.16 allows attackers to run arbitrary commands via the value param
KritikCVSS 9,8Kavram kanıtıEPSS %31flir · flir ax8 firmware10 Oca 2024
- CVE-2023-2986140Planlayın
An issue found in FLIR-DVTEL version not specified allows a remote attacker to execute arbitrary code via a crafted request to the managemen
KritikCVSS 9,8İstismar yokEPSS %2flir · dvtel camera firmware15 May 2023
- CVE-2018-381339İzleyin
getConfigExportFile.cgi on FLIR Brickstream 2300 devices 2.0 4.1.53.166 has Incorrect Access Control, as demonstrated by reading the AVI_USE
KritikCVSS 9,8İstismar yokEPSS %1flir · brickstream 2300 2d firmware1 Oca 2018
- CVE-2018-2513837İzleyin
FLIR AX8 Thermal Camera 1.32.16 Hard-Coded Credentials Authentication Bypass
KritikCVSS 9,3İstismar yokEPSS %1flir · flir ax8 firmware24 Ara 2025
- CVE-2022-3706036İzleyin
FLIR AX8 thermal sensor cameras version up to and including 1.46.16 is vulnerable to Directory Traversal due to an improper access restricti
YüksekCVSS 7,5İstismar yokEPSS %18flir · flir ax8 firmware18 Ağu 2022
- CVE-2018-2513934İzleyin
FLIR AX8 Thermal Camera 1.32.16 Unauthenticated RTSP Stream Disclosure
YüksekCVSS 8,7İstismar yokEPSS %1flir · flir ax8 firmware24 Ara 2025
- CVE-2022-3706231İzleyin
All FLIR AX8 thermal sensor cameras version up to and including 1.46.16 are affected by an insecure design vulnerability due to an improper
YüksekCVSS 7,5İstismar yokEPSS %3flir · flir ax8 firmware18 Ağu 2022
- CVE-2018-1292031İzleyin
Brickstream 2300 devices allow remote attackers to obtain potentially sensitive information via a direct request for the basic.html#ipsettin
YüksekCVSS 7,5İstismar yokEPSS %2flir · brickstream 2300 firmware28 Haz 2018
- CVE-2025-512630İzleyin
Teledyne FLIR AX8 settingsregional.php setDataTime command injection
YüksekCVSS 7,4İstismar yokEPSS %5flir · flir ax8 firmware24 May 2025
- CVE-2023-5112730İzleyin
FLIR AX8 thermal sensor cameras up to and including 1.46.16 are vulnerable to Directory Traversal due to improper access restriction.
YüksekCVSS 7,5Kavram kanıtıEPSS %1flir · flir ax8 firmware10 Oca 2024
- CVE-2022-436423İzleyin
Teledyne FLIR AX8 Web Service palette.php command injection
OrtaCVSS 5,5İstismar yokEPSS %4flir · flir ax8 firmware8 Ara 2022
- CVE-2022-3706321İzleyin
All FLIR AX8 thermal sensor cameras versions up to and including 1.46.16 are vulnerable to Cross Site Scripting (XSS) due to improper input
OrtaCVSS 5,4İstismar yokEPSS %2flir · flir ax8 firmware18 Ağu 2022
- CVE-2024-301315İzleyin
Teledyne FLIR AX8 User Registration test_login.php improper authorization
DüşükCVSS 2,1İstismar yokEPSS %23flir · flir ax8 firmware27 Mar 2024
- CVE-2025-569510İzleyin
Teledyne FLIR AX8 Backend subscriptions.php subscribe_to_alarm command injection
DüşükCVSS 2,0İstismar yokEPSS %7flir · flir ax8 firmware5 Haz 2025
- CVE-2025-51278İzleyin
Teledyne FLIR AX8 prod.php cross site scripting
DüşükCVSS 2,0İstismar yokEPSS %1flir · flir ax8 firmware24 May 2025
- CVE-2025-62668İzleyin
Teledyne FLIR AX8 upload.php unrestricted upload
DüşükCVSS 2,1İstismar yokEPSS %1flir · flir ax8 firmware19 Haz 2025