CVE-2023-51127 — HIGH (7.5)

Vulnerability Description

FLIR AX8 thermal sensor cameras up to and including 1.46.16 are vulnerable to Directory Traversal due to improper access restriction. This vulnerability allows an unauthenticated, remote attacker to obtain arbitrary sensitive file contents by uploading a specially crafted symbolic link file. NOTE: The vendor has stated that with the introduction of firmware version 1.49.16 (Jan 2023) the FLIR AX8 should no longer be affected by the vulnerability reported. Latest firmware version (as of Oct 2025, was released Jun 2024) is 1.55.16.

CVSS Score

7.5

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

NONE

Availability

NONE

Affected Products

Vendor	Product	Versions
Flir	Flir Ax8 Firmware	1.46.16
Flir	Flir Ax8	-

Related Weaknesses (CWE)

CWE-22

References

https://github.com/risuxx/CVE-2023-51127Third Party Advisory
https://github.com/risuxx/CVE-2023-51127Third Party Advisory

FAQ

What is CVE-2023-51127?

CVE-2023-51127 is a vulnerability with a CVSS score of 7.5 (HIGH). FLIR AX8 thermal sensor cameras up to and including 1.46.16 are vulnerable to Directory Traversal due to improper access restriction. This vulnerability allows an unauthenticated, remote attacker to o...

How severe is CVE-2023-51127?

CVE-2023-51127 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2023-51127?

Check the references section above for vendor advisories and patch information. Affected products include: Flir Flir Ax8 Firmware, Flir Flir Ax8.