Brickstream 2300 CVEs and Security Vulnerabilities

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

CVE-2018-3813

getConfigExportFile.cgi on FLIR Brickstream 2300 devices 2.0 4.1.53.166 has Incorrect Access Control, as demonstrated by reading the AVI_USER_ID and AVI_USER_PASSWORD fields via a direct request.

CVSS 3.0 · 9.8 Critical EPSS 1.2% KEV · Not listed

Vendors

Flir

Products

Brickstream 2300 2d Brickstream 2300 2d Firmware Brickstream 2300 3d and 3 more

CVE-2018-12920

Brickstream 2300 devices allow remote attackers to obtain potentially sensitive information via a direct request for the basic.html#ipsettings or basic.html#datadelivery URI.

CVSS 3.1 · 7.5 High EPSS 1.8% KEV · Not listed

Vendors

Flir

Products

Brickstream 2300 Brickstream 2300 Firmware

Page 1 of 1.