Priority HIGH 77
FLIR AX8 Thermal Camera 1.32.16 contains an unauthenticated vulnerability that allows remote attackers to access live video streams without credentials.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00531 · Published 2025-12-24 · No fix listed CWE-306
Priority HIGH 81
FLIR AX8 Thermal Camera 1.32.16 contains hard-coded SSH and web panel credentials that cannot be changed through normal camera operations.
CVSS 4.0CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.00621 · Published 2025-12-24 · No fix listed CWE-798
Priority MEDIUM 57
A vulnerability was detected in Teledyne FLIR AX8 up to 1.46.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00504 · Published 2025-06-19 · Fixed in 1.49.16 CWE-284
Priority MEDIUM 56
A vulnerability has been found in Teledyne FLIR AX8 up to 1.46.16.
CVSS 4.0MEDIUM 5.1· Network · High privileges · No interaction · EPSS 0.08014 · Published 2025-06-05 · Fixed in 1.49.16 CWE-74
Priority MEDIUM 56
A vulnerability was determined in Teledyne FLIR AX8 up to 1.46.16.
CVSS 4.0MEDIUM 5.1· Network · Low privileges · User interaction · EPSS 0.00903 · Published 2025-05-24 · Fixed in 1.49.16 CWE-79
Priority HIGH 73
A vulnerability was found in Teledyne FLIR AX8 up to 1.46.16.
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.05135 · Published 2025-05-24 · Fixed in 1.49.16 CWE-74
Priority MEDIUM 57
A flaw has been found in Teledyne FLIR AX8 up to 1.46.16.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.22987 · Published 2024-03-28 · Fixed in 1.49.16 CWE-266
Priority MEDIUM 41
FLIR AX8 thermal sensor cameras up to and including 1.46.16 are vulnerable to Directory Traversal due to improper access restriction.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01254 · Published 2024-01-10 · No fix listed CWE-22
Priority HIGH 67
Command injection vulnerability in /usr/www/res.php in FLIR AX8 up to 1.46.16 allows attackers to run arbitrary commands via the value parameter.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.31097 · Published 2024-01-10 · No fix listed CWE-77
Priority HIGH 70
A vulnerability has been found in Teledyne FLIR AX8 up to 1.46.16.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.04157 · Published 2022-12-08 · Fixed in 1.49.16 CWE-74
Priority LOW 28
All FLIR AX8 thermal sensor cameras versions up to and including 1.46.16 are vulnerable to Cross Site Scripting (XSS) due to improper input sanitization.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.0172 · Published 2022-08-18 · No fix listed CWE-79
Priority LOW 39
All FLIR AX8 thermal sensor cameras version up to and including 1.46.16 are affected by an insecure design vulnerability due to an improper directory access restriction.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.03381 · Published 2022-08-18 · No fix listed CWE-306
Priority CRITICAL 87
All FLIR AX8 thermal sensor cameras version up to and including 1.46.16 are vulnerable to Remote Command Injection.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.99627 · Published 2022-08-18 · No fix listed CWE-78
Priority MEDIUM 51
FLIR AX8 thermal sensor cameras version up to and including 1.46.16 is vulnerable to Directory Traversal due to an improper access restriction.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.19341 · Published 2022-08-18 · No fix listed CWE-22
THREATIST.IORead the docs