Description (CNA)
FLIR thermal traffic cameras contain an unauthenticated vulnerability that allows remote attackers to access live video streams without credentials. Attackers can directly retrieve video streams by accessing specific endpoints like /live.mjpeg, /snapshot.jpg, and RTSP streaming URLs without authentication.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| FLIR / FLIR Thermal Traffic Cameras | affected 1.01-0bb5b27 |
CWE
CWE-306
References
- https://www.exploit-db.com/exploits/45537
- https://www.flir.com
- https://www.zeroscience.mk/en/vulnerabilities/ZSL-2018-5489.php
ADP enrichment
No English description supplied.