Vulnerabilities > Flir > Critical

DATE CVE VULNERABILITY TITLE RISK
2024-01-10 CVE-2023-51126 Command Injection vulnerability in Flir AX8 Firmware
Command injection vulnerability in /usr/www/res.php in FLIR AX8 up to 1.46.16 allows attackers to run arbitrary commands via the value parameter.
network
low complexity
flir CWE-77
critical
9.8
2023-05-15 CVE-2023-29861 Unspecified vulnerability in Flir Dvtel Camera Firmware
An issue found in FLIR-DVTEL version not specified allows a remote attacker to execute arbitrary code via a crafted request to the management page of the device.
network
low complexity
flir
critical
9.8
2022-12-08 CVE-2022-4364 OS Command Injection vulnerability in Flir AX8 Firmware
A vulnerability classified as critical has been found in Teledyne FLIR AX8 up to 1.46.16.
network
low complexity
flir CWE-78
critical
9.8
2022-08-18 CVE-2022-37061 OS Command Injection vulnerability in Flir AX8 Firmware
All FLIR AX8 thermal sensor cameras version up to and including 1.46.16 are vulnerable to Remote Command Injection.
network
low complexity
flir CWE-78
critical
9.8
2018-01-01 CVE-2018-3813 Information Exposure vulnerability in Flir products
getConfigExportFile.cgi on FLIR Brickstream 2300 devices 2.0 4.1.53.166 has Incorrect Access Control, as demonstrated by reading the AVI_USER_ID and AVI_USER_PASSWORD fields via a direct request.
network
low complexity
flir CWE-200
critical
9.8