PT-2025-53360 · Undefined · Undefined

CVE-2018-25140 · Publicado 2025-12-24 · Atualizado 2025-12-24

NVD

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

FLIR thermal traffic cameras contain an unauthenticated device manipulation vulnerability in their WebSocket implementation that allows attackers to bypass authentication and authorization controls. Attackers can directly modify device configurations, access system information, and potentially initiate denial of service by sending crafted WebSocket messages without authentication.

Correção

Missing Authentication

Enumeração de Fraquezas

CWE-306

Identificadores relacionados

CVE-2018-25140

Produtos afetados

Undefined

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2018-25140 · Nota de Segurança
• https://exploit-db.com/exploits/45539 · Nota
• https://flir.com · Nota
• https://zeroscience.mk/en/vulnerabilities/ZSL-2018-5490.php · Nota