CVE-2017-20214

Critical CVSS: 9.3

FLIR Thermal Camera F/FC/PT/D firmware version 8.0.0.64 contains hard-coded SSH credentials that cannot be changed through normal camera operations. Attackers can leverage these persistent, unmodifiable credentials to gain unauthorized remote access to the thermal camera system.

Vendor

Product

CWE

CWE-798

Yayın Tarihi

2026-01-08 00:15:56

Güncelleme

2026-01-08 19:15:54

Source Identifier

disclosure@vulncheck.com

KEV Date Added

Kategoriler

CWE-798 CRITICAL 2026

Referanslar

https://cxsecurity.com/issue/WLB-2017090205 https://packetstormsecurity.com/files/144324 https://web.archive.org/web/20171011125811/https://www.flir.com/security/blog/details/?ID=87043 https://www.exploit-db.com/exploits/42787/ https://www.zeroscience.mk/en/vulnerabilities/ZSL-2017-5436.php https://www.zeroscience.mk/en/vulnerabilities/ZSL-2017-5436.php