| 标题 | FLIR FLIR FB-Series O FLIR FB-Series O and ID Firmware, Version 1.3.2.16 Improper Access Controls |
|---|
| 描述 | Production.html is a powerful management backend designed for internal production and debugging purposes. Its design intent is clearly private (evident from the directory name "priv"), but due to server misconfiguration, it is exposed on the public network, allowing any attacker who knows its URL to directly access it without any authentication. This vulnerability combines unauthorized access, information disclosure, and potential remote code execution into a complete, high-risk attack entry point. |
|---|
| 来源 | ⚠️ https://github.com/waiwai24/0101/blob/main/CVEs/FLIR/Production_html_Management_Backend_Unauthorized_Access.md |
|---|
| 用户 | waiwai24 (UID 81637) |
|---|
| 提交 | 2025-07-04 21時11分 (1 年前) |
|---|
| 管理 | 2025-07-13 09時47分 (9 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 316274 [Teledyne FLIR FB-Series O/FLIR FH-Series ID 1.3.2.16 Production Tools production.html 权限提升] |
|---|
| 积分 | 20 |
|---|