提出 #609549: FLIR FLIR FB-Series O FLIR FB-Series O and ID Firmware, Version 1.3.2.16 Improper Access Controls情報

タイトルFLIR FLIR FB-Series O FLIR FB-Series O and ID Firmware, Version 1.3.2.16 Improper Access Controls
説明Production.html is a powerful management backend designed for internal production and debugging purposes. Its design intent is clearly private (evident from the directory name "priv"), but due to server misconfiguration, it is exposed on the public network, allowing any attacker who knows its URL to directly access it without any authentication. This vulnerability combines unauthorized access, information disclosure, and potential remote code execution into a complete, high-risk attack entry point.
ソース⚠️ https://github.com/waiwai24/0101/blob/main/CVEs/FLIR/Production_html_Management_Backend_Unauthorized_Access.md
ユーザー
 waiwai24 (UID 81637)
送信2025年07月04日 21:11 (12 月 ago)
モデレーション2025年07月13日 09:47 (9 days later)
ステータス承諾済み
VulDBエントリ316274 [Teledyne FLIR FB-Series O/FLIR FH-Series ID 1.3.2.16 Production Tools production.html 特権昇格]
ポイント20

Do you need the next level of professionalism?

Upgrade your account now!