CVE-2018-25139

Опубликовано: 24 дек. 2025

Источник: nvd

CVSS3: 7.5

EPSS Низкий

Описание

FLIR AX8 Thermal Camera 1.32.16 contains an unauthenticated vulnerability that allows remote attackers to access live video streams without credentials. Attackers can directly connect to the RTSP stream using tools like VLC or FFmpeg to view and record thermal camera footage.

Ссылки

https://www.exploit-db.com/exploits/45606
Exploit
Third Party Advisory
VDB Entry
https://www.flir.com
Product
https://www.zeroscience.mk/en/vulnerabilities/ZSL-2018-5492.php
Exploit
Third Party Advisory
https://www.exploit-db.com/exploits/45606
Exploit
Third Party Advisory
VDB Entry
https://www.zeroscience.mk/en/vulnerabilities/ZSL-2018-5492.php
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:flir:flir_ax8_firmware:1.32.16:*:*:*:*:*:*:*

cpe:2.3:h:flir:flir_ax8:-:*:*:*:*:*:*:*

Конфигурация 2

Одновременно

cpe:2.3:o:flir:flir_ax8_firmware:1.17.13:*:*:*:*:*:*:*

cpe:2.3:h:flir:flir_ax8:-:*:*:*:*:*:*:*

EPSS

Процентиль: 32%

0.00122

Низкий

7.5 High

CVSS3

Дефекты

CWE-306

Связанные уязвимости

GHSA-c68w-pf33-46g8