CVE-2023-51127

HIGH

FLIR AX8 Firmware <= 1.46.16 - Unauthenticated Directory Traversal via Symbolic Link Upload

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2023-51127. PoCs published by risuxx.

AI-analyzed exploit summary The repository describes CVE-2023-51127, a directory traversal vulnerability in FLIR AX8 thermal sensor cameras (up to version 1.46.16). It allows unauthenticated remote attackers to read arbitrary sensitive files by uploading a crafted symbolic link file. The README provides basic vulnerability details but lacks exploitation code or in-depth technical analysis.

Description

FLIR AX8 thermal sensor cameras up to and including 1.46.16 are vulnerable to Directory Traversal due to improper access restriction. This vulnerability allows an unauthenticated, remote attacker to obtain arbitrary sensitive file contents by uploading a specially crafted symbolic link file. NOTE: The vendor has stated that with the introduction of firmware version 1.49.16 (Jan 2023) the FLIR AX8 should no longer be affected by the vulnerability reported. Latest firmware version (as of Oct 2025, was released Jun 2024) is 1.55.16.

Exploits (1)

nomisec WRITEUP 1 stars
by risuxx · poc
https://github.com/risuxx/CVE-2023-51127

The repository describes CVE-2023-51127, a directory traversal vulnerability in FLIR AX8 thermal sensor cameras (up to version 1.46.16). It allows unauthenticated remote attackers to read arbitrary sensitive files by uploading a crafted symbolic link file. The README provides basic vulnerability details but lacks exploitation code or in-depth technical analysis.

Classification
Writeup 80%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Theoretical
Target: FLIR AX8 thermal sensor cameras <= 1.46.16
No auth needed
Prerequisites: Network access to the vulnerable device
devstral-2 · analyzed Feb 19, 2026 Full analysis →

References (1)

Core 1
Core References

Scores

CVSS v3 7.5
EPSS 0.0125
EPSS Percentile 65.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact partial

Details

CWE
CWE-22
Status published
Products (1)
flir/flir_ax8_firmware 1.46.16
Published Jan 10, 2024
Tracked Since Feb 18, 2026