CVE-2023-51127

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-51127
FLIR AX8 thermal sensor cameras up to and including 1.46.16 are vulnerable to Directory Traversal due to improper access restriction. This vulnerability allows an unauthenticated, remote attacker to obtain arbitrary sensitive file contents by uploading a specially crafted symbolic link file.

7.5 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://github.com/risuxx/CVE-2023-51127 Third Party Advisory
https://github.com/risuxx/CVE-2023-51127 Third Party Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:flir:flir_ax8_firmware:1.46.16:*:*:*:*:*:*:*
cpe:2.3:h:flir:flir_ax8:-:*:*:*:*:*:*:*
History

21 Nov 2024, 08:37

Type Values Removed Values Added
References () https://github.com/risuxx/CVE-2023-51127 - Third Party Advisory () https://github.com/risuxx/CVE-2023-51127 - Third Party Advisory

17 Jan 2024, 22:16

Type Values Removed Values Added
New CVE
Information

Published : 2024-01-10 21:15

Updated : 2024-11-21 08:37

NVD link : CVE-2023-51127

Mitre link : CVE-2023-51127

CVE.ORG link : CVE-2023-51127

JSON object : View

Products Affected

flir

  • flir_ax8
  • flir_ax8_firmware
CWE
CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')