What is CVE-2017-20214?

CVE-2017-20214 is a high-severity vulnerability in Flir Systems, Inc. Thermal Camera F/fc/pt/d, classified under Use of Hard-coded Credentials. CVSS score: 7.5/10. Published 2026-01-08.

How severe is CVE-2017-20214?

High severity. CVSS v3 base score is 7.5 out of 10.

Vulnerability in Flir Systems, Inc. Thermal Camera F/fc/pt/d

CVE-2017-20214

FLIR Thermal Camera F/FC/PT/D firmware version 8.0.0.64 contains hard-coded SSH credentials that cannot be changed through normal camera operations. Attackers can leverage these persistent, unmodifiable credentials to gain unauthorized remote access to the thermal camera system.

EPSS: 0.003 (20.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.

Affected products

Flir Systems, Inc. Thermal Camera F/fc/pt/d — versions 8.0.0.64

Weakness classification (CWE)

CWE-798 — Use of Hard-coded Credentials

References

disclosure@vulncheck.com (third-party-advisory)
disclosure@vulncheck.com (exploit)
disclosure@vulncheck.com (exploit)
disclosure@vulncheck.com (third-party-advisory)
disclosure@vulncheck.com (vendor-advisory, patch)

Frequently asked questions

What is CVE-2017-20214?: CVE-2017-20214 is a high-severity vulnerability in Flir Systems, Inc. Thermal Camera F/fc/pt/d, classified under Use of Hard-coded Credentials. CVSS score: 7.5/10. Published 2026-01-08.
How severe is CVE-2017-20214?: High severity. CVSS v3 base score is 7.5 out of 10.