CVEvulnerability
CVE-2017-20213
8.7 HIGH
Official page ↗
- Status
- Deferred
- Published
- 2026-01-08
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 4.0 ([email protected])
- 8.7 HIGH — CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- Weaknesses
- CWE-306
Description
FLIR Thermal Camera F/FC/PT/D Stream firmware version 8.0.0.64 contains an unauthenticated vulnerability that allows remote attackers to access live camera streams without credentials. Attackers can exploit the vulnerability to view unauthorized thermal camera video feeds across multiple camera series without requiring any authentication.
Related
Weakness · CWE (1)
- CWE-306 Missing Authentication for Critical Functionality weakness
References
- https://cxsecurity.com/issue/WLB-2017090204 cxsecurity.com
- https://packetstormsecurity.com/files/144323 packetstormsecurity.com
- https://web.archive.org/web/20171011125811/https://www.flir.com/security/blog/details/?ID=87043 web.archive.org
- https://www.exploit-db.com/exploits/42789/ www.exploit-db.com
- https://www.zeroscience.mk/en/vulnerabilities/ZSL-2017-5435.php www.zeroscience.mk
- https://cxsecurity.com/issue/WLB-2017090204 cxsecurity.com
- https://www.exploit-db.com/exploits/42789/ www.exploit-db.com
- https://www.zeroscience.mk/en/vulnerabilities/ZSL-2017-5435.php www.zeroscience.mk