CVE-2017-20214 FLIR Thermal Camera F/FC/PT/D firmware version 8.0.0.64 Hard-Coded SSH Credentials Vulnerability
CriticalCVSS 9.3
EPSS 0.33%
- Published
- Updated
- Exploit status
- No public exploit known
Description
FLIR Thermal Camera F/FC/PT/D firmware version 8.0.0.64 contains hard-coded SSH credentials that cannot be changed through normal camera operations. Attackers can leverage these persistent, unmodifiable credentials to gain unauthorized remote access to the thermal camera system.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| FLIR Systems, Inc. FLIR Thermal Camera F/FC/PT/D | = 8.0.0.64 | No fix listed |
References
- Zero Science Lab Vulnerability Advisory exploit third-party-advisory
- Exploit Database Entry 42787 exploit
- Packet Storm Security Exploit Archive exploit
- CXSecurity Vulnerability Listing third-party-advisory
- Archived FLIR Security Advisory patch vendor-advisory