Vulnerability Description
FLIR thermal traffic cameras contain an unauthenticated vulnerability that allows remote attackers to access live video streams without credentials. Attackers can directly retrieve video streams by accessing specific endpoints like /live.mjpeg, /snapshot.jpg, and RTSP streaming URLs without authentication.
CVSS Score
HIGH
Related Weaknesses (CWE)
References
- https://www.exploit-db.com/exploits/45537
- https://www.flir.com
- https://www.zeroscience.mk/en/vulnerabilities/ZSL-2018-5489.php
- https://www.exploit-db.com/exploits/45537
- https://www.zeroscience.mk/en/vulnerabilities/ZSL-2018-5489.php
FAQ
What is CVE-2018-25141?
CVE-2018-25141 is a vulnerability with a CVSS score of 7.5 (HIGH). FLIR thermal traffic cameras contain an unauthenticated vulnerability that allows remote attackers to access live video streams without credentials. Attackers can directly retrieve video streams by ac...
How severe is CVE-2018-25141?
CVE-2018-25141 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2018-25141?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.