CVE-2018-25139

8.7 highEPSS 0.5%

High (8.7) in flir flir ax8 firmware. EPSS 0.5% chance of exploitation in the next 30 days.

FLIR AX8 Thermal Camera 1.32.16 contains an unauthenticated vulnerability that allows remote attackers to access live video streams without credentials. Attackers can directly connect to the RTSP stream using tools like VLC or FFmpeg to view and record thermal camera footage.

Severity

CVSS 4.0

8.7 high

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 44% of CVEs (scores of 2026-10-31)
CWE: CWE-306
Published: 2025-12-24
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

flir:flir_ax8_firmware

References

https://www.exploit-db.com/exploits/45606
https://www.flir.com
https://www.zeroscience.mk/en/vulnerabilities/ZSL-2018-5492.php
https://www.exploit-db.com/exploits/45606
https://www.zeroscience.mk/en/vulnerabilities/ZSL-2018-5492.php

Check your stack JSON