CVE-2022-37061
- Reference to the description:
- Description:
- All FLIR AX8 thermal sensor cameras version up to and including 1.46.16 are vulnerable to Remote Command Injection. This can be exploited to inject and execute arbitrary shell commands as the root user through the id HTTP POST parameter in the res.php endpoint. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with the root privileges.
- Last updated date:
- 12/09/2022
Reports
ACTIVELY EXPLOITED
- Type:
- exploitation
- Confidence:
- HIGH
- Date of publishing:
- 12/21/2022
- Type:
- exploit
- Confidence:
- HIGH
- Date of publishing:
- 08/18/2022
- Reference url to background
https://gist.github.com/Nwqda/9e16852ab7827dc62b8e44d6180a6899
- Type:
- exploit
- Confidence:
- HIGH
- Date of publishing:
- 10/25/2022
- Type:
- exploit
- Confidence:
- HIGH
- Date of publishing:
- 12/09/2022
- Reference url to background
http://packetstormsecurity.com/files/168114/FLIX-AX8-1.46.16-Remote-Command-Execution.html
- Type:
- exploit
- Confidence:
- HIGH
- Date of publishing:
- 12/09/2022
- Type:
- exploit
- Confidence:
- HIGH
- Date of publishing:
- 12/09/2022
- Reference url to background
http://packetstormsecurity.com/files/169701/FLIR-AX8-1.46.16-Remote-Command-Injection.html
- Type:
- exploit
- Confidence:
- HIGH
- Date of publishing:
- 12/09/2022
- Reference url to background
https://www.zeroscience.mk/en/vulnerabilities/ZSL-2018-5491.php