FA
Product
Flir Ax8 Firmware
14
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 6Medium 3Low 0
Watch
Add Flir Ax8 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-25138 | 9.8 | Dec 24 | FLIR AX8 Thermal Camera 1.32.16 Hard-Coded Credentials Authentication Bypass Affected: 1.32.16; 1.17.13 |
| CVE-2025-6266 | 9.8 | Jun 19 | Teledyne FLIR AX8 upload.php unrestricted upload Affected: before 1.49.16 |
| CVE-2023-51126 | 9.8 | Jan 10 | Command injection vulnerability in /usr/www/res.php in FLIR AX8 up to 1.46.16 allows attackers to run arbitrary commands via the value parameter Affected: through 1.46.16 |
| CVE-2022-4364 | 9.8 | Dec 8 | Teledyne FLIR AX8 Web Service palette.php command injection Affected: 1.46.0 before 1.46.16 |
| CVE-2022-37061 | 9.8 | Aug 18 | All FLIR AX8 thermal sensor cameras version up to and including 1.46.16 are vulnerable to Remote Command Injection Affected: through 1.46.16 |
| CVE-2025-5126 | 8.8 | May 24 | Teledyne FLIR AX8 settingsregional.php setDataTime command injection Affected: 1.46.0 through 1.46.16 |
| CVE-2024-3013 | 8.8 | Mar 28 | Teledyne FLIR AX8 User Registration test_login.php improper authorization Affected: 1.46.0 through 1.46.16 |
| CVE-2018-25139 | 7.5 | Dec 24 | FLIR AX8 Thermal Camera 1.32.16 Unauthenticated RTSP Stream Disclosure Affected: 1.32.16; 1.17.13 |
| CVE-2023-51127 | 7.5 | Jan 10 | FLIR AX8 thermal sensor cameras up to and including 1.46.16 are vulnerable to Directory Traversal due to improper access restriction Affected: 1.46.16 |
| CVE-2022-37062 | 7.5 | Aug 18 | All FLIR AX8 thermal sensor cameras version up to and including 1.46.16 are affected by an insecure design vulnerability due to an improper directory access restriction Affected: through 1.46.16 |
| CVE-2022-37060 | 7.5 | Aug 18 | FLIR AX8 thermal sensor cameras version up to and including 1.46.16 is vulnerable to Directory Traversal due to an improper access restriction Affected: through 1.46.16 |
| CVE-2025-5127 | 5.4 | May 24 | Teledyne FLIR AX8 prod.php cross site scripting Affected: 1.46.0 through 1.46.16 |
| CVE-2022-37063 | 5.4 | Aug 18 | All FLIR AX8 thermal sensor cameras versions up to and including 1.46.16 are vulnerable to Cross Site Scripting (XSS) due to improper input sanitization Affected: through 1.46.16 |
| CVE-2025-5695 | 4.7 | Jun 5 | Teledyne FLIR AX8 Backend subscriptions.php subscribe_to_alarm command injection Affected: 1.46.0 through 1.46.16 |
Showing 14