FLIR Thermal Camera F/FC/PT/D Stream 8.0.0.64 Unauthenticated Stream Disclosure

Advisories

severity: high
date: January 7, 2026
Affecting: FLIR Thermal Camera F/FC/PT/D Stream 8.0.0.64
CVE: CVE-2017-20213
CWE: CWE-306 Missing Authentication for Critical Function
CVSS: 8.7
CVSS V4 Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
References: Zero Science Lab Vulnerability Advisory
Exploit Database Entry 42789
Packet Storm Security Exploit Archive
CXSecurity Vulnerability Listing
Archived FLIR Security Advisory
Credit: LiquidWorm as Gjoko Krstic of Zero Science Lab
Description: FLIR Thermal Camera F/FC/PT/D Stream firmware version 8.0.0.64 contains an unauthenticated vulnerability that allows remote attackers to access live camera streams without credentials. Attackers can exploit the vulnerability to view unauthorized thermal camera video feeds across multiple camera series without requiring any authentication.