CVE-2017-20214
FLIR Thermal Camera F/FC/PT/D firmware version 8.0.0.64 Hard-Coded SSH Credentials Vulnerability
CVSS Score
7.5
EPSS Score
0.0%
EPSS Percentile
0th
FLIR Thermal Camera F/FC/PT/D firmware version 8.0.0.64 contains hard-coded SSH credentials that cannot be changed through normal camera operations. Attackers can leverage these persistent, unmodifiable credentials to gain unauthorized remote access to the thermal camera system.
| CWE | CWE-798 |
| Vendor | flir systems, inc. |
| Product | flir thermal camera f/fc/pt/d |
| Published | Jan 7, 2026 |
| Last Updated | Apr 7, 2026 |
Stay Ahead of the Next One
Get instant alerts for flir systems, inc. flir thermal camera f/fc/pt/d
Be the first to know when new high vulnerabilities affecting flir systems, inc. flir thermal camera f/fc/pt/d are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None
Affected Versions
FLIR Systems, Inc. / FLIR Thermal Camera F/FC/PT/D
8.0.0.64
References
zeroscience.mk: https://www.zeroscience.mk/en/vulnerabilities/ZSL-2017-5436.php exploit-db.com: https://www.exploit-db.com/exploits/42787/ packetstormsecurity.com: https://packetstormsecurity.com/files/144324 cxsecurity.com: https://cxsecurity.com/issue/WLB-2017090205 web.archive.org: https://web.archive.org/web/20171011125811/https://www.flir.com/security/blog/details/?ID=87043
Credits
LiquidWorm as Gjoko Krstic of Zero Science Lab