Vulnerabilities (CVE)

Filtered by vendor Flir Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2018-12920 1 Flir 2 Brickstream 2300, Brickstream 2300 Firmware 2021-05-03 5.0 MEDIUM 7.5 HIGH
Brickstream 2300 devices allow remote attackers to obtain potentially sensitive information via a direct request for the basic.html#ipsettings or basic.html#datadelivery URI.
CVE-2018-3813 1 Flir 6 Brickstream 2300 2d, Brickstream 2300 2d Firmware, Brickstream 2300 3d and 3 more 2018-01-17 5.0 MEDIUM 9.8 CRITICAL
getConfigExportFile.cgi on FLIR Brickstream 2300 devices 2.0 4.1.53.166 has Incorrect Access Control, as demonstrated by reading the AVI_USER_ID and AVI_USER_PASSWORD fields via a direct request.