FLIR Systems FLIR Brickstream 3D+ Unauthenticated Config Download File Disclosure
Posted by deepcore on October 16, 2018 – 3:31 pm
The FLIR Brickstream 3D+ sensor is vulnerable to unauthenticated config download and file disclosure vulnerability when calling the ExportConfig REST API (getConfigExportFile.cgi). This will enable the attacker to disclose sensitive information and help her in authentication bypass, privilege escalation and/or full system access.
Post a reply
You must be logged in to post a comment.