Flir Systems, Inc.
9 CVEs across 8 Flir Systems, Inc. products. Browse Flir Systems, Inc. vulnerabilities, severities, and proof-of-concept exploits.
Flir Systems, Inc. products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-20216 | Critical | 9.8 | 2026-01-08 | FLIR Thermal Camera PT-Series firmware version 8.0.0.64 contains multiple unauthenticated remote command injection vulnerabilities in the controllerFlirSystem… |
CVE-2017-20215 | High | 8.8 | 2026-01-08 | FLIR Thermal Camera FC-S/PT firmware version 8.0.0.64 contains an authenticated OS command injection vulnerability that allows attackers to execute shell comma… |
CVE-2017-20214 | High | 7.5 | 2026-01-08 | FLIR Thermal Camera F/FC/PT/D firmware version 8.0.0.64 contains hard-coded SSH credentials that cannot be changed through normal camera operations. Attackers… |
CVE-2017-20213 | High | 7.5 | 2026-01-08 | FLIR Thermal Camera F/FC/PT/D Stream firmware version 8.0.0.64 contains an unauthenticated vulnerability that allows remote attackers to access live camera str… |
CVE-2017-20212 | Medium | 6.2 | 2026-01-08 | FLIR Thermal Camera F/FC/PT/D firmware version 8.0.0.64 contains an information disclosure vulnerability that allows unauthenticated attackers to read arbitrar… |
CVE-2018-25140 | High | 7.5 | 2025-12-24 | FLIR thermal traffic cameras contain an unauthenticated device manipulation vulnerability in their WebSocket implementation that allows attackers to bypass aut… |
CVE-2018-25139 | High | 7.5 | 2025-12-24 | FLIR AX8 Thermal Camera 1.32.16 contains an unauthenticated vulnerability that allows remote attackers to access live video streams without credentials. Attack… |
CVE-2018-25137 | High | 7.5 | 2025-12-24 | FLIR Brickstream 3D+ 2.1.742.1842 contains an unauthenticated vulnerability in the ExportConfig REST API that allows attackers to download sensitive configurat… |
CVE-2018-25136 | High | 7.5 | 2025-12-24 | FLIR Brickstream 3D+ 2.1.742.1842 contains an unauthenticated vulnerability that allows remote attackers to access live video streams without credentials. Atta… |