Insecure Design Vulnerability in FLIR AX8 Thermal Sensor Cameras

CVE-2022-37062

What is CVE-2022-37062?

FLIR AX8 thermal sensor cameras, specifically those running versions up to and including 1.46.16, are susceptible to an insecure design vulnerability. This flaw allows an unauthenticated remote attacker to gain unauthorized access to the device by exploiting a misconfiguration in directory access restrictions. By sending a specially crafted URI, an attacker can retrieve the path to the SQLite users database, potentially downloading it to extract usernames and hashed passwords, thereby compromising user accounts and sensitive information.

References