Approved changes feed: RSS · Atom

cpe:2.3:o:flir:flir_ax8_firmware:1.32.16:*:*:*:*:*:*:*

part: o version: 1.32.16 update: *

VendorFlir (45ec7128-8f62-5c3d-8867-b572696a493d)
ProductFlir Ax8 Firmware (bee8fb49-cd46-5e17-8de5-dd651d45a5e8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-25139 vulnerable 2026-06-03 14:38:40.983451 FLIR AX8 Thermal Camera 1.32.16 Unauthenticated RTSP Stream Disclosure
HIGH (7.5)
FLIR AX8 Thermal Camera 1.32.16 contains an unauthenticated vulnerability that allows remote attackers to access live video streams without credentials. Attackers can directly connect to the RTSP stream using tools like VLC or FFmpeg to view and record thermal camera footage.
Published: 2025-12-24T19:27:47.117Z
Updated: 2025-12-24T20:26:15.968Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-25138 vulnerable 2026-06-03 14:38:40.980668 FLIR AX8 Thermal Camera 1.32.16 Hard-Coded Credentials Authentication Bypass
CRITICAL (9.8)
FLIR AX8 Thermal Camera 1.32.16 contains hard-coded SSH and web panel credentials that cannot be changed through normal camera operations. Attackers can exploit these persistent credentials to gain unauthorized shell access and login to multiple camera interfaces using predefined username and password combinations.
Published: 2025-12-24T19:27:46.730Z
Updated: 2026-01-05T14:09:52.377Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.