CVE-2017-20214
HIGHFLIR Thermal Camera F/FC/PT/D 8.0.0.64 - Use of Hard-coded Credentials
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2017-20214. PoCs published by LiquidWorm.
AI-analyzed exploit summary This document describes hard-coded SSH credentials in FLIR Systems' thermal cameras, which cannot be changed by end-users. It lists multiple affected firmware and software versions along with the credentials.
Description
FLIR Thermal Camera F/FC/PT/D firmware version 8.0.0.64 contains hard-coded SSH credentials that cannot be changed through normal camera operations. Attackers can leverage these persistent, unmodifiable credentials to gain unauthorized remote access to the thermal camera system.
Exploits (1)
This document describes hard-coded SSH credentials in FLIR Systems' thermal cameras, which cannot be changed by end-users. It lists multiple affected firmware and software versions along with the credentials.
References (5)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N