إرسال #609549: FLIR FLIR FB-Series O FLIR FB-Series O and ID Firmware, Version 1.3.2.16 Improper Access Controlsالمعلومات

عنوانFLIR FLIR FB-Series O FLIR FB-Series O and ID Firmware, Version 1.3.2.16 Improper Access Controls
الوصفProduction.html is a powerful management backend designed for internal production and debugging purposes. Its design intent is clearly private (evident from the directory name "priv"), but due to server misconfiguration, it is exposed on the public network, allowing any attacker who knows its URL to directly access it without any authentication. This vulnerability combines unauthorized access, information disclosure, and potential remote code execution into a complete, high-risk attack entry point.
المصدر⚠️ https://github.com/waiwai24/0101/blob/main/CVEs/FLIR/Production_html_Management_Backend_Unauthorized_Access.md
المستخدم
 waiwai24 (UID 81637)
ارسال04/07/2025 09:11 PM (1 سنة منذ)
الاعتدال13/07/2025 09:47 AM (9 days later)
الحالةتمت الموافقة
إدخال VulDB316274 [Teledyne FLIR FB-Series O/FLIR FH-Series ID 1.3.2.16 Production Tools production.html تجاوز الصلاحيات]
النقاط20

Want to know what is going to be exploited?

We predict KEV entries!