High severity · published Jan 7, 2026
CVE-2017-20213
FLIR Thermal Camera F/FC/PT/D Stream 8.0.0.64 Unauthenticated Stream Disclosure
7.5
CVSS
0.5%
EPSS
No
On KEV
Description
FLIR Thermal Camera F/FC/PT/D Stream firmware version 8.0.0.64 contains an unauthenticated vulnerability that allows remote attackers to access live camera streams without credentials. Attackers can exploit the vulnerability to view unauthorized thermal camera video feeds across multiple camera series without requiring any authentication.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 41% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FT
FLIR Thermal Camera F/FC/PT/D Stream · FLIR Systems, Inc.
8.0.0.64 · source: vendor
Affected product
FT
FLIR Thermal Camera F/FC/PT/D Stream
FLIR Systems, Inc.
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2017-20213
CVE.org
https://www.cve.org/CVERecord?id=CVE-2017-20213
cxsecurity.com
https://cxsecurity.com/issue/WLB-2017090204
packetstormsecurity.com
https://packetstormsecurity.com/files/144323
web.archive.org
https://web.archive.org/web/20171011125811/https://www.flir.com/security/blog/details/?ID=87043
www.exploit-db.com
https://www.exploit-db.com/exploits/42789/
www.zeroscience.mk
https://www.zeroscience.mk/en/vulnerabilities/ZSL-2017-5435.php