CVE-2017-20212
FLIR Thermal Camera F/FC/PT/D 8.0.0.64 Information Disclosure via File Reading
CVSS Score
6.2
EPSS Score
0.0%
EPSS Percentile
0th
FLIR Thermal Camera F/FC/PT/D firmware version 8.0.0.64 contains an information disclosure vulnerability that allows unauthenticated attackers to read arbitrary files through unverified input parameters. Attackers can exploit the /var/www/data/controllers/api/xml.php readFile() function to access local system files without authentication.
| CWE | CWE-22 |
| Vendor | flir systems, inc. |
| Product | flir thermal camera f/fc/pt/d |
| Published | Jan 7, 2026 |
| Last Updated | Apr 7, 2026 |
Stay Ahead of the Next One
Get instant alerts for flir systems, inc. flir thermal camera f/fc/pt/d
Be the first to know when new medium vulnerabilities affecting flir systems, inc. flir thermal camera f/fc/pt/d are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Attack Vector
Local
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None
Affected Versions
FLIR Systems, Inc. / FLIR Thermal Camera F/FC/PT/D
8.0.0.64
References
zeroscience.mk: https://www.zeroscience.mk/en/vulnerabilities/ZSL-2017-5434.php exploit-db.com: https://www.exploit-db.com/exploits/42786/ packetstormsecurity.com: https://packetstormsecurity.com/files/144322 cxsecurity.com: https://cxsecurity.com/issue/WLB-2017090202 web.archive.org: https://web.archive.org/web/20171011125811/https://www.flir.com/security/blog/details/?ID=87043
Credits
LiquidWorm as Gjoko Krstic of Zero Science Lab