by Kastro
Paper/Archive/CVE-2018-25138

CVE-2018-25138

FLIR Systems FLIR AX8 Thermal Camera — FLIR AX8 Thermal Camera 1.32.16 Hard-Coded Credentials Authentication Bypass

EPSS 0.6%public exploitCVSS 9.8
critical.is priorityof 100
49
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 49.7.497 × 209.9Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

FLIR AX8 Thermal Camera 1.32.16 contains hard-coded SSH and web panel credentials that cannot be changed through normal camera operations. Attackers can exploit these persistent credentials to gain unauthorized shell access and login to multiple camera interfaces using predefined username and password combinations.

Affected

ProductAffectedFixed inSource
FLIR AX8 Thermal Camera1.32.16–CNA

Scores by source

VulnCheck (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
VulnCheck (CNA)9.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CISA ADPSSVCExploitation: poc · Automatable: yes · Technical impact: total

References

exploitexploit-db.com/exploits/45629refflir.comexploitzeroscience.mk/en/vulnerabilities/ZSL-2018-5494.php