Directory Traversal Vulnerability in FLIR AX8 Thermal Sensor Cameras

CVE-2022-37060

What is CVE-2022-37060?

The FLIR AX8 thermal sensor cameras, specifically versions up to and including 1.46.16, have a vulnerability that allows directory traversal. This occurs due to inadequate access restrictions, enabling an unauthenticated remote attacker to exploit the device by crafting a URI that includes directory traversal characters. This exploitation can lead to the disclosure of sensitive files located outside the server's designated restricted path, posing a significant risk to system integrity and confidentiality.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References