CVE-2023-46295: SSRF
An issue was discovered in Teledyne FLIR M300 2.00-19. Unauthenticated remote code execution can occur in the web server. An attacker can exploit this by sending a POST request to the vulnerable PHP page. An attacker can elevate to root permissions with Sudo.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-46295?
CVE-2023-46295 is rated as critical due to its potential for unauthenticated remote code execution.
How do I fix CVE-2023-46295?
To mitigate CVE-2023-46295, users should update Teledyne FLIR M300 to the latest patched version provided by the vendor.
What are the potential consequences of CVE-2023-46295 exploitation?
If exploited, CVE-2023-46295 can allow an attacker to execute arbitrary code and obtain root permissions on the device.
Who is affected by CVE-2023-46295?
Users of the Teledyne FLIR M300 device running version 2.00-19 are affected by CVE-2023-46295.
What type of attack does CVE-2023-46295 enable?
CVE-2023-46295 enables attackers to execute unauthorized commands via a specially crafted POST request.