Flir Ax8 Firmware
Approved changes feed: RSS · Atom
cpe:2.3:o:flir:flir_ax8_firmware:*:*:*:*:*:*:*:*
part: o version: * update: *
| Vendor | Flir (45ec7128-8f62-5c3d-8867-b572696a493d) |
|---|---|
| Product | Flir Ax8 Firmware (bee8fb49-cd46-5e17-8de5-dd651d45a5e8) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-6266 |
vulnerable | 2026-06-08 07:43:14.707567 |
Teledyne FLIR AX8 upload.php unrestricted upload
MEDIUM (6.3)
A vulnerability was detected in Teledyne FLIR AX8 up to 1.46. Affected by this vulnerability is an unknown functionality of the file /upload.php. Performing manipulation of the argument File results in unrestricted upload. It is possible to initiate the attack remotely. The exploit is now public and may be used. Upgrading to version 1.49.16 addresses this issue. Upgrading the affected component is recommended. The vendor points out: "FLIR AX8 internal web site has been refactored to be able to handle the reported vulnerabilities."
Published: 2025-06-19T12:00:17.929Z
Updated: 2025-10-15T13:18:37.106Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-5695 |
vulnerable | 2026-06-08 07:37:25.479340 |
Teledyne FLIR AX8 Backend subscriptions.php subscribe_to_alarm command injection
MEDIUM (4.7)
A vulnerability has been found in Teledyne FLIR AX8 up to 1.46.16. This impacts the function subscribe_to_spot/subscribe_to_delta/subscribe_to_alarm of the file /usr/www/application/models/subscriptions.php of the component Backend. Such manipulation leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.49.16 will fix this issue. It is suggested to upgrade the affected component. The vendor points out: "FLIR AX8 internal web site has been refactored to be able to handle the reported vulnerabilities."
Published: 2025-06-05T21:00:21.192Z
Updated: 2025-10-15T13:18:42.245Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-5127 |
vulnerable | 2026-06-08 07:35:24.213812 |
Teledyne FLIR AX8 prod.php cross site scripting
LOW (3.5)
A vulnerability was determined in Teledyne FLIR AX8 up to 1.46.16. This issue affects some unknown processing of the file /prod.php. Executing manipulation of the argument cmd can lead to cross site scripting. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized. Upgrading to version 1.49.16 is capable of addressing this issue. It is recommended to upgrade the affected component. The vendor points out: "FLIR AX8 internal web site has been refactored to be able to handle the reported vulnerabilities."
Published: 2025-05-24T15:31:04.412Z
Updated: 2025-10-15T13:18:44.998Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-5126 |
vulnerable | 2026-06-08 07:35:24.212331 |
Teledyne FLIR AX8 settingsregional.php setDataTime command injection
HIGH (8.8)
A vulnerability was found in Teledyne FLIR AX8 up to 1.46.16. This vulnerability affects the function setDataTime of the file \usr\www\application\models\settingsregional.php. Performing manipulation of the argument year/month/day/hour/minute results in command injection. The attack may be initiated remotely. The exploit has been made public and could be used. Upgrading to version 1.49.16 is able to resolve this issue. Upgrading the affected component is recommended. The vendor points out: "FLIR AX8 internal web site has been refactored to be able to handle the reported vulnerabilities."
Published: 2025-05-24T15:00:10.190Z
Updated: 2025-10-15T13:18:48.138Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-3013 |
vulnerable | 2026-06-08 06:41:52.178674 |
Teledyne FLIR AX8 User Registration test_login.php improper authorization
MEDIUM (6.3)
A flaw has been found in Teledyne FLIR AX8 up to 1.46.16. The impacted element is an unknown function of the file /tools/test_login.php?action=register of the component User Registration. Executing manipulation can lead to improper authorization. The attack may be performed from remote. The exploit has been published and may be used. Upgrading to version 1.49.16 is sufficient to resolve this issue. Upgrading the affected component is recommended. The vendor points out: "FLIR AX8 internal web site has been refactored to be able to handle the reported vulnerabilities."
Published: 2024-03-28T00:31:04.101Z
Updated: 2025-10-15T13:18:50.593Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-51126 |
vulnerable | 2026-06-08 06:16:17.260807 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-4364 |
vulnerable | 2026-06-08 05:51:37.348367 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-37063 |
vulnerable | 2026-06-08 05:46:08.606027 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-37062 |
vulnerable | 2026-06-08 05:46:08.605589 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-37061 |
vulnerable | 2026-06-08 05:46:08.605122 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-37060 |
vulnerable | 2026-06-08 05:46:08.603629 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.