Executive Summary

This vulnerability is an authenticated OS command injection in the FLIR Thermal Camera FC-S/PT firmware version 8.0.0.64. It allows an attacker who has valid credentials to inject and execute arbitrary shell commands with root privileges on the device. This means the attacker can gain complete control over the thermal camera system by exploiting unvalidated input parameters, specifically through a POST request to the /page/maintenance/lanSettings/dns endpoint. [1, 2, 3]

Useful 0 Not Useful 0

Impact Analysis

The impact of this vulnerability is severe as it grants an authenticated attacker root-level command execution on the affected thermal camera devices. This can lead to complete compromise of the device, allowing the attacker to control the system, disrupt its operation, or use it as a foothold to attack other parts of the network. Since these cameras are often used for perimeter protection, exploitation could undermine physical security and network integrity. [1, 2, 3]

Useful 0 Not Useful 0

Detection Guidance

This vulnerability can be detected by attempting an authenticated POST request to the endpoint `/page/maintenance/lanSettings/dns` with specially crafted parameters that include shell command injection payloads. For example, injecting a command such as `sleep 17` in the DNS server parameters can confirm the presence of the vulnerability by observing the delayed response. This method requires valid authentication credentials on the device. Specific commands would involve using tools like curl or similar HTTP clients to send the POST request with injected shell commands in the parameters. [1, 2]

Useful 0 Not Useful 0

Mitigation Strategies

Immediate mitigation steps include restricting access to the affected FLIR Thermal Camera FC-S/PT devices to trusted users only, ensuring that only authorized personnel have authentication credentials. Additionally, monitoring and controlling network access to the device's management interfaces can reduce exposure. Applying any available firmware or software updates from FLIR Systems that address this vulnerability is critical. If patches are not yet available, consider disabling or limiting the vulnerable functionality or isolating the device from untrusted networks to prevent exploitation. [1, 2, 3]

Useful 0 Not Useful 0