Executive Summary

This vulnerability affects the FLIR Brickstream 3D+ sensor firmware version 2.1.742.1842, allowing remote attackers to access live video streams without any authentication. Attackers can directly retrieve multiple image streams such as middleImage.jpg, rightimage.jpg, leftimage.jpg, and others by sending HTTP requests to the device on port 8083. This unauthorized access exposes live RTSP video streams and images, enabling attackers to surveil areas monitored by the device without credentials. [1, 2]

Useful 0 Not Useful 0

Impact Analysis

The vulnerability can lead to unauthorized surveillance and privacy breaches by allowing attackers to access live video feeds without authentication. This can expose sensitive visual information from locations such as retail stores, malls, banks, stadiums, and transportation terminals where the device is deployed. The exposure of live video streams can compromise security and privacy, potentially enabling malicious actors to monitor people’s movements and activities without consent. [1, 2]

Useful 0 Not Useful 0

Detection Guidance

This vulnerability can be detected by attempting to access the exposed image endpoints on the FLIR Brickstream 3D+ device without authentication. You can use HTTP requests to fetch images such as middleImage.jpg, rightimage.jpg, leftimage.jpg, threeDimage.jpg, and traffic map images on port 8083. For example, using curl commands: curl http://<device-ip>:8083/middleImage.jpg curl http://<device-ip>:8083/rightimage.jpg curl http://<device-ip>:8083/leftimage.jpg If these commands return images without requiring credentials, the device is vulnerable. Additionally, proof-of-concept scripts exist that automate fetching sequences of images from the device. These images can be compiled into video streams using tools like ffmpeg and played with VLC media player for further verification. [1]

Useful 0 Not Useful 0

Mitigation Strategies

Immediate mitigation steps include restricting network access to the FLIR Brickstream 3D+ device, especially blocking or limiting access to port 8083 where the vulnerable HTTP endpoints are exposed. Implement network segmentation or firewall rules to prevent unauthorized external access. Check with FLIR Systems for available patches or firmware updates addressing this vulnerability and apply them as soon as possible. Follow FLIR's cybersecurity best practices to secure the device and monitor for unauthorized access attempts. [2]

Useful 0 Not Useful 0

Compliance Impact

This vulnerability allows unauthorized access to live video streams without credentials, posing a privacy risk through unauthorized surveillance. Such unauthorized access to potentially sensitive video data could lead to non-compliance with privacy regulations like GDPR or HIPAA, which require protection of personal and sensitive information. Therefore, the vulnerability may negatively impact compliance with these standards by exposing personal data without proper authorization. [1, 2]

Useful 0 Not Useful 0