CVE-2017-20213

CVE Database · CVE-2017-20213

CVE-2017-20213

· HIGHDeferred

CVSS v3.1

7.5

CVSS v4.0

8.7

EPSS

0.42%

Published

Jan 7, 2026

Modified

Apr 14, 2026

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

FLIR Thermal Camera F/FC/PT/D Stream firmware version 8.0.0.64 contains an unauthenticated vulnerability that allows remote attackers to access live camera streams without credentials. Attackers can exploit the vulnerability to view unauthorized thermal camera video feeds across multiple camera series without requiring any authentication.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weaknesses (CWE)

CWE-306

References (8)

https://cxsecurity.com/issue/WLB-2017090204

https://packetstormsecurity.com/files/144323

https://web.archive.org/web/20171011125811/https://www.flir.com/security/blog/details/?ID=87043

https://www.exploit-db.com/exploits/42789/

https://www.zeroscience.mk/en/vulnerabilities/ZSL-2017-5435.php

https://cxsecurity.com/issue/WLB-2017090204

https://www.exploit-db.com/exploits/42789/

https://www.zeroscience.mk/en/vulnerabilities/ZSL-2017-5435.php

KEV Catalog EPSS Scores Vendors All CVEs