| शीर्षक | FLIR FLIR FB-Series O FLIR FB-Series O and ID Firmware, Version 1.3.2.16 Command Injection |
|---|
| विवरण | The built-in `sendCommand()` function in the production.html page is intended to call the backend `runcmd.sh` script to execute arbitrary commands, with a hardcoded backdoor password. Although this functionality is currently disabled due to server CGI configuration errors, it is essentially a "time bomb" waiting to be activated. |
|---|
| स्रोत | ⚠️ https://github.com/waiwai24/0101/blob/main/CVEs/FLIR/Command_Injection_Vulnerability_in_Developer_Backdoor_Page.md |
|---|
| उपयोगकर्ता | waiwai24 (UID 81637) |
|---|
| सबमिशन | 04/07/2025 09:14 PM (1 वर्ष पहले) |
|---|
| संयम | 13/07/2025 09:47 AM (9 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 316276 [Teledyne FLIR FB-Series O/FLIR FH-Series ID 1.3.2.16 runcmd.sh sendCommand cmd अधिकार वृद्धि] |
|---|
| अंक | 19 |
|---|