CVE-2022-4364: Teledyne FLIR AX8 Web Service palette.php command injection
A vulnerability classified as critical has been found in Teledyne FLIR AX8 up to 1.46.16. Affected is an unknown function of the file palette.php of the component Web Service Handler. The manipulation of the argument palette leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-215118 is the identifier assigned to this vulnerability.
Other sources
A vulnerability has been found in Teledyne FLIR AX8 up to 1.46.16. Affected by this issue is some unknown functionality of the file palette.php of the component Web Service Handler. The manipulation of the argument palette leads to command injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.49.16 can resolve this issue. Upgrading the affected component is advised. The vendor points out: "FLIR AX8 internal web site has been refactored to be able to handle the reported vulnerabilities."
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-4364?
The severity of CVE-2022-4364 is critical with a severity value of 9.8.
How does CVE-2022-4364 affect Teledyne FLIR AX8 up to version 1.46.16?
CVE-2022-4364 affects Teledyne FLIR AX8 up to version 1.46.16 by exploiting an unknown function in the file palette.php of the Web Service Handler component, allowing for remote command injection.
Is Flir Flir Ax8 firmware affected by CVE-2022-4364?
Yes, Flir Flir Ax8 firmware up to version 1.46.16 is affected by CVE-2022-4364.
What is the Common Weakness Enumeration (CWE) ID associated with CVE-2022-4364?
The Common Weakness Enumeration (CWE) IDs associated with CVE-2022-4364 are 77, 78, 707, and 74.
Where can I find more information about CVE-2022-4364?
You can find more information about CVE-2022-4364 at the following references: [link1](https://github.com/siriuswhiter/VulnHub/blob/main/Flir/02-FLIR-AX8%20palette.php%20%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E/FLIR-AX8%20palette.php%20%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E1.md) [link2](https://vuldb.com/?id.215118)