Teledyne FLIR vulnerabilities
We track 9 vulnerabilities in Teledyne FLIR products across 2 products. 9 are rated high or critical, and none are known to be exploited. The most recent was published on October 1, 2026.
Latest Teledyne FLIR vulnerabilities
- 8.5 High severity
Aware2: Cleartext Transmission of Sensitive Information
Cleartext transmission without a cryptographic integrity check in operator control unit to robot UDP traffic in Teledyne FLIR Aware2 versions through 6.9.0.2 (PackBot) and 1.7.9 (FirstLook) allows adjacent unauthenticated attackers to intercept, hijack, or mod
- 9.4 Critical severity
Aware2: Use of Hard-coded Credentials
Hardcoded passwords in the access control in Teledyne FLIR Aware2 versions through 6.9.0.2 (PackBot) and 1.7.9 (FirstLook) allows remote unauthenticated attackers to access and reconfigure Teledyne FLIR PackBot and FirstLook robots running this software via re
- 10.0 Critical severity
Aware2: Improper Limitation of a Pathname to a Restricted Directory
Unvalidated pathnames in the web interface in Teledyne FLIR Aware2 versions through 6.9.0.2 (PackBot) and 1.7.9 (FirstLook) allows remote unauthenticated attackers to read configuration and security parameters on Teledyne FLIR PackBot and FirstLook robots runn
- 9.4 Critical severity
Aware2: Cleartext Transmission of Sensitive Information
Cleartext transmission in the primary control endpoints of Teledyne FLIR Aware2 versions through 6.9.0.2 allows remote unauthenticated attackers to intercept, hijack, or modify session traffic against Teledyne FLIR PackBot robots running this software via snif
- 7.1 High severity
Aware2: Missing Authentication for Critical Functionality
Missing authentication in the web interface in Teledyne FLIR Aware2 versions through 6.9.0.2 allows remote unauthenticated attackers to achieve denial of service against Teledyne FLIR PackBot robots running this software via misuse of the reboot endpoint.
- 9.8 Critical severity
AX8: Unrestricted Upload of File with Dangerous Type
A vulnerability was detected in Teledyne FLIR AX8 up to 1.46. Affected by this vulnerability is an unknown functionality of the file /upload.php. Performing manipulation of the argument File results in unrestricted upload. It is possible to initiate the attack
- 8.8 High severity
AX8: Improper Neutralization of Special Elements used in a Command
A vulnerability was found in Teledyne FLIR AX8 up to 1.46.16. This vulnerability affects the function setDataTime of the file \usr\www\application\models\settingsregional.php. Performing manipulation of the argument year/month/day/hour/minute results in comman
- 8.8 High severity
AX8: Incorrect Privilege Assignment
A flaw has been found in Teledyne FLIR AX8 up to 1.46.16. The impacted element is an unknown function of the file /tools/test_login.php?action=register of the component User Registration. Executing manipulation can lead to improper authorization. The attack ma
- 9.8 Critical severity
AX8: Improper Neutralization of Special Elements used in an OS Command
A vulnerability has been found in Teledyne FLIR AX8 up to 1.46.16. Affected by this issue is some unknown functionality of the file palette.php of the component Web Service Handler. The manipulation of the argument palette leads to command injection. The attac