CVE-2017-20213CWE-306

FLIR Thermal Camera F/FC/PT/D Stream 8.0.0.64 Unauthenticated Stream Disclosure

High · published January 7, 2026

CVSS v4.0
8.7
EPSS
0%
Percentile
39.7
In the wild
Unconfirmed
What it is

🚨 No credentials needed to peek! The FLIR Thermal Camera firmware version 8.0.0.64 has an unauthenticated vulnerability that lets attackers access live thermal feeds without any hassle. 🔥 It's like a hotel with a glass lobby where anyone can stroll in and watch the front desk's activities without signing in — utterly compromising privacy! An attacker could easily access sensitive thermal imaging streams from multiple camera series, exposing private information and potentially undermining security. In the wrong hands, this could lead to unauthorized surveillance, making it a serious breach of privacy.

Put simply

It's like a hotel with a glass lobby where anyone can stroll in and watch the front desk's activities without signing in — utterly compromising privacy! This vulnerability allows remote attackers to access live camera streams without authentication, exposing unauthorized video feeds from FLIR Thermal Cameras. It essentially bypasses any security checks that should be in place to protect the streams.

What to do

An attacker could easily access sensitive thermal imaging streams from multiple camera series, exposing private information and potentially undermining security. In the wrong hands, this could lead to unauthorized surveillance, making it a serious breach of privacy. Immediately patch the firmware to the latest version that addresses this vulnerability. Also, ensure strict access controls are applied to camera feeds, limiting exposure to authorized personnel only. You've got this! Follow these steps to secure your cameras and keep those unauthorized viewers out! 🛡️

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00474 · 39.7th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2026-01-07T23:09Z
EPSS history
Timeline
  • 07 JAN 23:09Z
    FLIR Thermal Camera F/FC/PT/D Stream 8.0.0.64 Unauthenticated Stream Disclosure
    cvelistv5