ID
VAR-201810-1642
CVE
CVE-2018-25138
TITLE
FLIR Systems FLIR AX8 Thermal Camera 1.32.16 Hard-coded Credentials Shell Access
Trust: 0.1
DESCRIPTION
FLIR AX8 Thermal Camera 1.32.16 contains hard-coded SSH and web panel credentials that cannot be changed through normal camera operations. Attackers can exploit these persistent credentials to gain unauthorized shell access and login to multiple camera interfaces using predefined username and password combinations. Thermal Imaging Camera For Continuous Condition and Safety Monitoring FLIR AX8 is a thermal sensor with imaging capabilities. Combining thermal and visual cameras in a small, affordable package, the AX8 provides continuous temperature monitoring and alarming capabilities to protec critical electrical and mechanical equipment. The AX8 helps you guard against unplanned outages, service interruptions, and equipment failure.<br/><br/> The FLIR AX series camera/sensor also has built-in support to connect to industrial control equipment such as programmable logic controllers (PLCs), and allows the sharing of analysis and alarm results and simple control using the Ethernet/IP and Modbus TCP field bus protocols. Compact and easy to install, the AX8 provides continuous monitoring of electrical cabinets, process and manufacturing areas, data centers, energy generation and distribution, transportation and mass transit, storage facilities and refrigeration warehouses.The devices utilizes hard-coded and credentials within its Linux distributionimage. Attacker could exploit thisvulnerability by logging in using the default credentials for the web panel or gainshell access.Tested on: GNU/Linux 3.0.35-flir+gfd883a0 (armv7l)lighttpd/1.4.33PHP/5.4.14
Trust: 0.99
AFFECTED PRODUCTS
| vendor: | flir | model: | ax8 | scope: | eq | version: | 1.32.16 | Trust: 1.0 |
| vendor: | flir | model: | ax8 | scope: | eq | version: | 1.17.13 | Trust: 1.0 |
| vendor: | flir | model: | systems flir ax8 thermal camera | scope: | eq | version: | 1.17.13 | Trust: 0.1 |
| vendor: | flir | model: | systems flir ax8 thermal camera | scope: | eq | version: | os: neco_v1.8-0-g7ffe5b3 | Trust: 0.1 |
| vendor: | flir | model: | systems flir ax8 thermal camera | scope: | eq | version: | hardware: flir systems neco board | Trust: 0.1 |
CVSS
SEVERITY | CVSSV2 | CVSSV3 | ||||||||||||||||||||||||||||||||||||||||||||||
|
|
PROBLEMTYPE DATA
| problemtype: | CWE-798 | Trust: 1.0 |
TYPE
Local/Remote,System Access, DoS
Trust: 0.1
EXPLOIT AVAILABILITY
EXTERNAL IDS
| db: | EXPLOIT-DB | id: | 45629 | Trust: 1.1 |
| db: | ZSL | id: | ZSL-2018-5494 | Trust: 1.1 |
| db: | NVD | id: | CVE-2018-25138 | Trust: 1.0 |
| db: | PACKETSTORM | id: | 149800 | Trust: 0.1 |
REFERENCES
| url: | https://www.exploit-db.com/exploits/45629 | Trust: 1.0 |
| url: | https://www.flir.com | Trust: 1.0 |
| url: | https://www.zeroscience.mk/en/vulnerabilities/zsl-2018-5494.php | Trust: 1.0 |
| url: | https://www.flir.com/security/best-practices-for-cybersecurity/ | Trust: 0.1 |
| url: | https://www.flir.com/globalassets/security/flir-pro-security-cyber-hardening-guide.pdf | Trust: 0.1 |
| url: | https://www.flir.com/globalassets/security/cybersecurity-bulletin-10-12-18.pdf | Trust: 0.1 |
| url: | https://packetstormsecurity.com/files/149800 | Trust: 0.1 |
| url: | https://www.exploit-db.com/exploits/45629/ | Trust: 0.1 |
| url: | https://exchange.xforce.ibmcloud.com/vulnerabilities/151332 | Trust: 0.1 |
CREDITS
Vulnerability discovered by Gjoko Krstic
Trust: 0.1
SOURCES
| db: | ZSL | id: | ZSL-2018-5494 |
| db: | NVD | id: | CVE-2018-25138 |
LAST UPDATE DATE
2026-01-15T23:36:18.249000+00:00
SOURCES UPDATE DATE
| db: | ZSL | id: | ZSL-2018-5494 | date: | 2018-10-18T00:00:00 |
| db: | NVD | id: | CVE-2018-25138 | date: | 2026-01-05T14:15:50.533 |
SOURCES RELEASE DATE
| db: | ZSL | id: | ZSL-2018-5494 | date: | 2018-10-14T00:00:00 |
| db: | NVD | id: | CVE-2018-25138 | date: | 2025-12-24T20:15:47.807 |