CVE-2018-3813
getConfigExportFile.cgi on FLIR Brickstream 2300 devices 2.0 4.1.53.166 has Incorrect Access Control, as demonstrated by reading the AVI_USER_ID and AVI_USER_PASSWORD fields via a direct request.
- Score
- CVSS 3.0 9.8 Critical
- Status
- Modified - cve@mitre.org
- Published
- 2018-01-01
- Last modified
- 2024-08-05
- Weaknesses
- CWE-200
Affected products
- Brickstream 2300 2d Firmware (Flir)
- Brickstream 2300 3d+ Firmware (Flir)
- Brickstream 2300 3d Firmware (Flir)
References
- http://misteralfa-hack.blogspot.cl/2018/01/brickstream-recuento-y-seguimiento-de.html
