Critical · published January 7, 2026
🚨 Hard-coded SSH credentials in FLIR Thermal Camera firmware mean attackers could walk right in and control the system—no passwords to change! 🔥 Think of it as leaving the backdoor of a secure building wide open, with an unchangeable key hanging right beside it. Anyone walking by can just waltz in and explore all the sensitive areas without any resistance! An attacker could gain unauthorized remote access to the thermal camera system, allowing them to view, manipulate, or even disable the camera without any trace. This could lead to a catastrophic breach of privacy and security, especially in sensitive environments!
Think of it as leaving the backdoor of a secure building wide open, with an unchangeable key hanging right beside it. Anyone walking by can just waltz in and explore all the sensitive areas without any resistance! This vulnerability arises from hard-coded SSH credentials in firmware version 8.0.0.64 that cannot be altered through standard camera operations, creating a huge security gap.
An attacker could gain unauthorized remote access to the thermal camera system, allowing them to view, manipulate, or even disable the camera without any trace. This could lead to a catastrophic breach of privacy and security, especially in sensitive environments! Immediately update the firmware to the latest version that addresses this vulnerability and ensure that any devices using this firmware are properly secured behind additional layers of authentication. Regularly audit your camera systems to check for unauthorized access attempts. This is fixable! Update your firmware and you'll have your security tightened in no time! 🛡️