Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Teledyne FLIR AX8 Backend subscriptions.php subscribe_to_alarm command injection
Vulnerability Description
A vulnerability has been found in Teledyne FLIR AX8 up to 1.46.16. This impacts the function subscribe_to_spot/subscribe_to_delta/subscribe_to_alarm of the file /usr/www/application/models/subscriptions.php of the component Backend. Such manipulation leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.49.16 will fix this issue. It is suggested to upgrade the affected component. The vendor points out: "FLIR AX8 internal web site has been refactored to be able to handle the reported vulnerabilities."
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
Vulnerability Type
在命令中使用的特殊元素转义处理不恰当(命令注入)
Vulnerability Title
Teledyne FLIR AX8 安全漏洞
Vulnerability Description
Teledyne FLIR AX8是美国Teledyne FLIR公司的一系列热监控摄像头。 Teledyne FLIR AX8 1.46.16及之前版本存在安全漏洞，该漏洞源于组件Backend中文件/usr/www/application/models/subscriptions.php存在命令注入。
CVSS Information
N/A
Vulnerability Type
N/A