Approved changes feed: RSS · Atom

cpe:2.3:o:flir:flir_ax8_firmware:1.46.16:*:*:*:*:*:*:*

part: o version: 1.46.16 update: *

VendorFlir (45ec7128-8f62-5c3d-8867-b572696a493d)
ProductFlir Ax8 Firmware (bee8fb49-cd46-5e17-8de5-dd651d45a5e8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-3013 vulnerable 2026-06-03 14:56:23.059226 Teledyne FLIR AX8 User Registration test_login.php improper authorization
MEDIUM (6.3)
A flaw has been found in Teledyne FLIR AX8 up to 1.46.16. The impacted element is an unknown function of the file /tools/test_login.php?action=register of the component User Registration. Executing manipulation can lead to improper authorization. The attack may be performed from remote. The exploit has been published and may be used. Upgrading to version 1.49.16 is sufficient to resolve this issue. Upgrading the affected component is recommended. The vendor points out: "FLIR AX8 internal web site has been refactored to be able to handle the reported vulnerabilities."
Published: 2024-03-28T00:31:04.101Z
Updated: 2025-10-15T13:18:50.593Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51127 vulnerable 2026-06-03 14:53:31.940027 Details available
FLIR AX8 thermal sensor cameras up to and including 1.46.16 are vulnerable to Directory Traversal due to improper access restriction. This vulnerability allows an unauthenticated, remote attacker to obtain arbitrary sensitive file contents by uploading a specially crafted symbolic link file. NOTE: The vendor has stated that with the introduction of firmware version 1.49.16 (Jan 2023) the FLIR AX8 should no longer be affected by the vulnerability reported. Latest firmware version (as of Oct 2025, was released Jun 2024) is 1.55.16.
Published: 2024-01-10T00:00:00.000Z
Updated: 2025-10-17T19:13:13.590Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.