← Back

CVE-2018-3813

nvd nist
Published: Jan 1, 2018Modified: Nov 21, 2024

JSON object

Loading...
9.8
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD

Description

getConfigExportFile.cgi on FLIR Brickstream 2300 devices 2.0 4.1.53.166 has Incorrect Access Control, as demonstrated by reading the AVI_USER_ID and AVI_USER_PASSWORD fields via a direct request.

Affected (3)

Flir
2 products
Brickstream 2300 2d Firmware
Brickstream 2300 3d+ Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Brickstream 2300 2d Firmware
Version 2.0_4.1.53.166
Running on/withPlatform Versions
Flir
Brickstream 2300 2d
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Brickstream 2300 3d Firmware
Version 2.0_4.1.53.166
Running on/withPlatform Versions
Flir
Brickstream 2300 3d
All versions
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Brickstream 2300 3d+ Firmware
Version 2.0_4.1.53.166
Running on/withPlatform Versions
Flir
Brickstream 2300 3d+
All versions

Related CWEs

CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (2)

Source: cve@mitre.org
ExploitThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitThird Party Advisory

Timeline

No history available yet.