PT-2025-53356 · Undefined · Undefined

Published 2025-12-24 · Updated 2025-12-24 · CVE-2018-25136

NVD

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

FLIR Brickstream 3D+ 2.1.742.1842 contains an unauthenticated vulnerability that allows remote attackers to access live video streams without credentials. Attackers can retrieve video stream images by directly accessing multiple image endpoints like middleImage.jpg, rightimage.jpg, and leftimage.jpg.

Fix

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2018-25136

Affected Products

Undefined

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2018-25136 · Security Note
• http://brickstream.com · Note
• https://zeroscience.mk/en/vulnerabilities/ZSL-2018-5496.php · Note
• https://exploit-db.com/exploits/45607 · Note