Intrusion Prevention

Flir.Systems.Camera.Live.Feed.Stream.Information.Disclosure

Description

This indicates an attack attempt to exploit an Information Disclosure vulnerability in FLIR Systems FLIR Thermal/Infrared Camera.
The vulnerability is due to insufficient sanitizing of user supplied inputs in the application. A remote attacker can exploit this to gain unauthorized access to live feed, via a crafted HTTP request.

Affected Products

Release: 1.4.1, 1.4, 1.3.4 GA, 1.3.3 GA and 1.3.2
FC-Series S (FC-334-NTSC)
FC-Series ID
FC-Series R
PT-Series (PT-334 200562)
D-Series
F-Series

Impact

Information Disclosure: Remote attackers can gain sensitive information from vulnerable systems.

Recommended Actions

Currently we are unaware of any vendor supplied patch or updates available for this issue.