Directory Traversal Vulnerability in FLIR AX8 Thermal Sensor Cameras

CVE-2022-37060

What is CVE-2022-37060?

The FLIR AX8 thermal sensor cameras, specifically versions up to and including 1.46.16, have a vulnerability that allows directory traversal. This occurs due to inadequate access restrictions, enabling an unauthenticated remote attacker to exploit the device by crafting a URI that includes directory traversal characters. This exploitation can lead to the disclosure of sensitive files located outside the server's designated restricted path, posing a significant risk to system integrity and confidentiality.

References