CVE-2024-3013: Teledyne FLIR AX8 User Registration test_login.php improper authorization
A flaw has been found in Teledyne FLIR AX8 up to 1.46.16. The impacted element is an unknown function of the file /tools/testlogin.php?action=register of the component User Registration. Executing manipulation can lead to improper authorization. The attack may be performed from remote. The exploit has been published and may be used. Upgrading to version 1.49.16 is sufficient to resolve this issue. Upgrading the affected component is recommended. The vendor points out: "FLIR AX8 internal web site has been refactored to be able to handle the reported vulnerabilities."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-3013?
CVE-2024-3013 has been rated as critical.
What component is affected by CVE-2024-3013?
CVE-2024-3013 affects the User Registration component in FLIR AX8.
How does CVE-2024-3013 exploit the system?
CVE-2024-3013 allows improper authorization through the manipulation of the file /tools/test_login.php?action=register.
What versions of FLIR AX8 are impacted by CVE-2024-3013?
CVE-2024-3013 affects FLIR AX8 versions up to and including 1.46.16.
How can I mitigate the risks associated with CVE-2024-3013?
To mitigate CVE-2024-3013, upgrade to a patched version of FLIR AX8 that addresses the vulnerability.