CVE-2018-25136: FLIR Brickstream 3D+ 2.1.742.1842 Unauthenticated RTSP Stream Disclosure

Published Dec 24, 2025

Updated

FLIR Brickstream 3D+ 2.1.742.1842 contains an unauthenticated vulnerability that allows remote attackers to access live video streams without credentials. Attackers can retrieve video stream images by directly accessing multiple image endpoints like middleImage.jpg, rightimage.jpg, and leftimage.jpg.

Affected Software

1 affected component

FLIR Brickstream 3D+

Event History

Dec 24, 2025

CVE Published

via MITRE·07:27 PM

Data Sourced

via MITRE·07:27 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·08:15 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2018-25136?

CVE-2018-25136 is considered a critical vulnerability due to its potential for unauthorized access to live video streams.

How do I fix CVE-2018-25136?

To fix CVE-2018-25136, ensure that the affected FLIR Brickstream 3D+ device firmware is updated to the latest version provided by the vendor.

What type of vulnerability is CVE-2018-25136?

CVE-2018-25136 is an unauthenticated remote access vulnerability that allows attackers to access video streams without credentials.

What devices are affected by CVE-2018-25136?

CVE-2018-25136 specifically affects the FLIR Brickstream 3D+ device models running the compromised version.

What can attackers do with CVE-2018-25136?

With CVE-2018-25136, attackers can retrieve live video feed images from the FLIR Brickstream 3D+ without needing any authentication.