FL
Vendor
Flir
19
CVEs
0
On KEV
0
New 30D
Products
FA9.8
Flir Ax8 Firmware
Flir
14 CVEs0 on KEV0 new
B29.8
Brickstream 2300 2d Firmware
Flir
1 CVEs0 on KEV0 new
B29.8
Brickstream 2300 3d Firmware
Flir
1 CVEs0 on KEV0 new
B27.5
Brickstream 2300 Firmware
Flir
1 CVEs0 on KEV0 new
DC9.8
Dvtel Camera Firmware
Flir
1 CVEs0 on KEV0 new
FT7.5
FLIR Thermal Traffic Cameras
FLIR
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2018-25141 | FT FLIR Thermal Traffic Cameras FLIR | 7.5 | Dec 24 | FLIR Thermal Traffic Cameras V1.01-0bb5b27 Unauthenticated RTSP Stream Disclosure |
| CVE-2018-25139 | FA Flir Ax8 Firmware Flir | 7.5 | Dec 24 | FLIR AX8 Thermal Camera 1.32.16 Unauthenticated RTSP Stream Disclosure |
| CVE-2018-25138 | FA Flir Ax8 Firmware Flir | 9.8 | Dec 24 | FLIR AX8 Thermal Camera 1.32.16 Hard-Coded Credentials Authentication Bypass |
| CVE-2025-6266 | FA Flir Ax8 Firmware Flir | 9.8 | Jun 19 | Teledyne FLIR AX8 upload.php unrestricted upload |
| CVE-2025-5695 | FA Flir Ax8 Firmware Flir | 4.7 | Jun 5 | Teledyne FLIR AX8 Backend subscriptions.php subscribe_to_alarm command injection |
| CVE-2025-5127 | FA Flir Ax8 Firmware Flir | 5.4 | May 24 | Teledyne FLIR AX8 prod.php cross site scripting |
| CVE-2025-5126 | FA Flir Ax8 Firmware Flir | 8.8 | May 24 | Teledyne FLIR AX8 settingsregional.php setDataTime command injection |
| CVE-2024-3013 | FA Flir Ax8 Firmware Flir | 8.8 | Mar 28 | Teledyne FLIR AX8 User Registration test_login.php improper authorization |
| CVE-2023-51126 | FA Flir Ax8 Firmware Flir | 9.8 | Jan 10 | Command injection vulnerability in /usr/www/res.php in FLIR AX8 up to 1.46.16 allows attackers to run arbitrary commands via the value parameter |
| CVE-2023-51127 | FA Flir Ax8 Firmware Flir | 7.5 | Jan 10 | FLIR AX8 thermal sensor cameras up to and including 1.46.16 are vulnerable to Directory Traversal due to improper access restriction |
| CVE-2023-29861 | DC Dvtel Camera Firmware Flir | 9.8 | May 15 | An issue found in FLIR-DVTEL version not specified allows a remote attacker to execute arbitrary code via a crafted request to the management page of the device |
| CVE-2022-4364 | FA Flir Ax8 Firmware Flir | 9.8 | Dec 8 | Teledyne FLIR AX8 Web Service palette.php command injection |
| CVE-2022-37063 | FA Flir Ax8 Firmware Flir | 5.4 | Aug 18 | All FLIR AX8 thermal sensor cameras versions up to and including 1.46.16 are vulnerable to Cross Site Scripting (XSS) due to improper input sanitization |
| CVE-2022-37062 | FA Flir Ax8 Firmware Flir | 7.5 | Aug 18 | All FLIR AX8 thermal sensor cameras version up to and including 1.46.16 are affected by an insecure design vulnerability due to an improper directory access restriction |
| CVE-2022-37060 | FA Flir Ax8 Firmware Flir | 7.5 | Aug 18 | FLIR AX8 thermal sensor cameras version up to and including 1.46.16 is vulnerable to Directory Traversal due to an improper access restriction |
| CVE-2022-37061 | FA Flir Ax8 Firmware Flir | 9.8 | Aug 18 | All FLIR AX8 thermal sensor cameras version up to and including 1.46.16 are vulnerable to Remote Command Injection |
| CVE-2018-12920 | B2 Brickstream 2300 Firmware Flir | 7.5 | Jun 28 | Brickstream 2300 devices allow remote attackers to obtain potentially sensitive information via a direct request for the basic.html#ipsettings or basic.html#datadelivery URI |
| CVE-2018-3813 | B2 Brickstream 2300 3d+ Firmware Flir | 9.8 | Jan 1 | getConfigExportFile.cgi on FLIR Brickstream 2300 devices 2.0 4.1.53.166 has Incorrect Access Control, as demonstrated by reading the AVI_USER_ID and AVI_USER_PASSWORD fields via a… |