What is CVE-2022-37062?

CVE-2022-37062 is a high-severity vulnerability in Flir Flir_ax8, classified under Missing Authentication for Critical Function. CVSS score: 7.5/10. Published 2022-08-18.

How severe is CVE-2022-37062?

High severity. CVSS v3 base score is 7.5 out of 10.

Auth bypass in Flir Flir_ax8

CVE-2022-37062

All FLIR AX8 thermal sensor cameras version up to and including 1.46.16 are affected by an insecure design vulnerability due to an improper directory access restriction. An unauthenticated, remote attacker can exploit this by sending a URI…

Vulnerability class: Broken Authentication

EPSS: 0.026 (83.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.

Affected products

Weakness classification (CWE)

CWE-306 — Missing Authentication for Critical Function

References

cve@mitre.org (Product, Vendor Advisory)
cve@mitre.org (Exploit, Third Party Advisory, Mitigation)
cve@mitre.org (Broken Link)

Frequently asked questions

What is CVE-2022-37062?: CVE-2022-37062 is a high-severity vulnerability in Flir Flir_ax8, classified under Missing Authentication for Critical Function. CVSS score: 7.5/10. Published 2022-08-18.
How severe is CVE-2022-37062?: High severity. CVSS v3 base score is 7.5 out of 10.