Approved changes feed: RSS · Atom

cpe:2.3:a:teledyne:flir_m300:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorTeledyne (5827d6ea-404d-5b61-8caf-544728791465)
ProductFlir M300 (75ded531-eb9b-53a3-808d-a4600d8faa07)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-46295 vulnerable 2026-06-08 06:12:44.621027 Details available
An issue was discovered in Teledyne FLIR M300 2.00-19. Unauthenticated remote code execution can occur in the web server. An attacker can exploit this by sending a POST request to the vulnerable PHP page. An attacker can elevate to root permissions with Sudo.
Published: 2024-05-01T00:00:00.000Z
Updated: 2024-08-02T20:45:40.730Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-46294 vulnerable 2026-06-08 06:12:44.620333 Details available
An issue was discovered in Teledyne FLIR M300 2.00-19. User account passwords are encrypted locally, and can be decrypted to cleartext passwords using the utility umSetup. This utility requires root permissions to execute.
Published: 2024-05-01T00:00:00.000Z
Updated: 2024-11-04T17:09:19.968Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.