cveboard RSS feed

CVE-2018-25140

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2018
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

FLIR Thermal Traffic Cameras V1.01-0bb5b27 Unauthenticated Websocket Device Manipulation

FLIR thermal traffic cameras contain an unauthenticated device manipulation vulnerability in their WebSocket implementation that allows attackers to bypass authentication and authorization controls. Attackers can directly modify device configurations, access system information, and potentially initiate denial of service by sending crafted WebSocket messages without authentication.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

Thermal Traffic Cameras

Vendor
FLIR Systems, Inc.
Product
Thermal Traffic Cameras
Platforms
Unknown
Default status
Unknown
Thermal Traffic Cameras · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
V1.01-0bb5b27affectedUnavailableUnavailableUnavailableNone listed
E1.00.09affectedUnavailableUnavailableUnavailableNone listed
V1.02.P01affectedUnavailableUnavailableUnavailableNone listed
V1.05.P01affectedUnavailableUnavailableUnavailableNone listed
V1.04.P02affectedUnavailableUnavailableUnavailableNone listed
V1.04affectedUnavailableUnavailableUnavailableNone listed
V1.01.P02affectedUnavailableUnavailableUnavailableNone listed
V1.05.P03affectedUnavailableUnavailableUnavailableNone listed
V1.06affectedUnavailableUnavailableUnavailableNone listed
V1.02.P02affectedUnavailableUnavailableUnavailableNone listed