CVE-2017-20216: FLIR Thermal Camera PT-Series firmware version 8.0.0.64 Unauthenticated Remote Command Injection
FLIR Thermal Camera PT-Series firmware version 8.0.0.64 contains multiple unauthenticated remote command injection vulnerabilities in the controllerFlirSystem.php script. Attackers can execute arbitrary system commands as root by exploiting unsanitized POST parameters in the execFlirSystem() function through shellexec() calls. Exploitation evidence was observed by the Shadowserver Foundation on 2026-01-06 (UTC).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-20216?
CVE-2017-20216 is classified as a high severity vulnerability due to its potential for remote command injection.
How do I fix CVE-2017-20216?
To fix CVE-2017-20216, upgrade the firmware of the FLIR Thermal Camera PT-Series to the latest version provided by FLIR.
What are the risks associated with CVE-2017-20216?
The risks of CVE-2017-20216 include the potential for attackers to execute arbitrary commands on the device, compromising system integrity.
Who is affected by CVE-2017-20216?
CVE-2017-20216 affects users of the FLIR Thermal Camera PT-Series running firmware version 8.0.0.64.
What type of vulnerability is CVE-2017-20216?
CVE-2017-20216 is a remote command injection vulnerability that allows unauthenticated attackers to execute commands on the device.