CVE-2017-20213
FLIR Thermal Camera F/FC/PT/D Stream 8.0.0.64 Unauthenticated Stream Disclosure
- State
- Published
- Severity
- 8.7 High
- Published
- Jan 7, 2026
- Updated
- Apr 7, 2026
- Reserved
- Jan 6, 2026
Description
FLIR Thermal Camera F/FC/PT/D Stream firmware version 8.0.0.64 contains an unauthenticated vulnerability that allows remote attackers to access live camera streams without credentials. Attackers can exploit the vulnerability to view unauthorized thermal camera video feeds across multiple camera series without requiring any authentication.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 8.7 High | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N | VulnCheck |
| 3.1 | 7.5 High | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N | VulnCheck |
Weaknesses
- CWE-306 Missing Authentication for Critical Function
Affected Products
| Product | Versions |
|---|---|
FLIR Thermal Camera F/FC/PT/D StreamFLIR Systems, Inc. |
|
References
- Zero Science Lab Vulnerability Advisorythird-party-advisory
- Exploit Database Entry 42789exploit
- Packet Storm Security Exploit Archiveexploit
- CXSecurity Vulnerability Listingthird-party-advisory
- Archived FLIR Security Advisoryvendor-advisorypatch
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.