critical9.8
CVE-2018-3813
getConfigExportFile.cgi on FLIR Brickstream 2300 devices 2.0 4.1.53.166 has Incorrect Access Control, as demonstrated by reading the AVI_USER_ID and AVI_USER_P…
Impact
getConfigExportFile.cgi on FLIR Brickstream 2300 devices 2.0 4.1.53.166 has Incorrect Access Control, as demonstrated by reading the AVI_USER_ID and AVI_USER_PASSWORD fields via a direct request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Flir | Brickstream 2300 2d Firmware | Version 2.0_4.1.53.166 |
| Flir | Brickstream 2300 3d Firmware | Version 2.0_4.1.53.166 |
| Flir | Brickstream 2300 3d\+ Firmware | Version 2.0_4.1.53.166 |