Back to Database
Status published
Critical
CVE-2018-3813
getConfigExportFile.cgi on FLIR Brickstream 2300 devices 2.0 4.1.53.166 has Incorrect...
Vulnerability Description
getConfigExportFile.cgi on FLIR Brickstream 2300 devices 2.0 4.1.53.166 has Incorrect Access Control, as demonstrated by reading the AVI_USER_ID and AVI_USER_PASSWORD fields via a direct request.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-3813
Credits & Attribution
No credits recorded in the NVD database.
More from flir
View All →CVE-2022-37063
All FLIR AX8 thermal sensor cameras versions up to and...
Medium
5.4
CVE-2022-37062
All FLIR AX8 thermal sensor cameras version up to and...
High
7.5
CVE-2022-37061
All FLIR AX8 thermal sensor cameras version up to and...
Critical
9.8
CVE-2022-37060
FLIR AX8 thermal sensor cameras version up to and including...
High
7.5
CVE-2018-12920
Brickstream 2300 devices allow remote attackers to obtain potentially sensitive...
High
7.5
Affected Vendor
flir
View all reports →Affected Software
brickstream 2300 2d firmware, brickstream 2300 3d firmware, brickstream 2300 3d\+ firmware
Vulnerable Versions:
2.0_4.1.53.166
Timeline
Official Publish:
January 1st, 2018
Last Modified:
August 5th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.