Authentication Bypass in Teledyne FLIR Aware2 Web Interface

Executive Summary

CVE-2026-14983 is a missing authentication vulnerability in the web interface of Teledyne FLIR Aware2 versions through 6.9.0.2. It allows remote unauthenticated attackers to cause denial of service against PackBot robots by exploiting the reboot endpoint without requiring any credentials.

Useful 0 Not Useful 0

Detection Guidance

To detect this vulnerability, monitor network traffic for unauthorized HTTP GET requests targeting the reboot endpoint of Teledyne FLIR Aware2 web interfaces. Check for repeated reboot commands or unusual system behavior like persistent reboot loops. Inspect logs for suspicious activity on ports typically used by the web interface.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability enables attackers to force PackBot robots into a persistent reboot loop, rendering them inoperable during critical missions like explosive ordnance disposal or reconnaissance. Exploitation requires network access, which may be easier on older unencrypted networks but harder on modern encrypted deployments.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could impact compliance with standards requiring physical security and operational reliability of critical systems. For example, HIPAA requires safeguards for protected health information, and a non-functional robot could disrupt medical or emergency response operations. GDPR focuses on data protection, but this flaw risks operational disruption rather than direct data exposure.

Useful 0 Not Useful 0

Mitigation Strategies

Immediately restrict network access to the Teledyne FLIR Aware2 web interface. Apply the remediation guidance provided by Teledyne by September 30, 2026. Ensure all deployments use encrypted networks to prevent unauthorized access. Monitor systems for signs of exploitation and reboot loops.

Useful 0 Not Useful 0