CVE-2017-20214

HIGH

FLIR Thermal Camera - Auth Bypass

Title source: llm

Description

FLIR Thermal Camera F/FC/PT/D firmware version 8.0.0.64 contains hard-coded SSH credentials that cannot be changed through normal camera operations. Attackers can leverage these persistent, unmodifiable credentials to gain unauthorized remote access to the thermal camera system.

Exploits (1)

exploitdb WRITEUP
by LiquidWorm · textremotehardware
https://www.exploit-db.com/exploits/42787

References (5)

Scores

CVSS v3 7.5
EPSS 0.0005
EPSS Percentile 14.2%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Classification

CWE
CWE-798
Status draft

Timeline

Published Jan 08, 2026
Tracked Since Feb 18, 2026