References https://neroteam.com/blog/flir-ax8-vulnerability-report https://www.nsfocus.net/vulndb/68913 https://nvd.nist.gov/vuln/detail/cve-2022-37061 https://www.broadcom.com/support/security-center/attacksignatures/detail?asid=33899 https://www.tenable.com/plugins/ot/505190 http://www.nessus.org/u?63571f1c https://pentest-tools.com/vulnerabilities-exploits/flir-ax8-14616-remote-command-injection_27191 https://www.cvedetails.com/cve/CVE-2022-4364/ https://vuldb.com/vuln/215118 https://github.com/WlX-33/PoC-for-CVE/blob/main/CVE-2022-36266/FLIR%20AX8%20Unauthenticated%20OS%20Command%20Injection.py
Related VulnerabilitiesPoCCVE-2017-8225: GoAhead Camera - Credential DisclosurePoCCVE-2019-25246: BEWARD N100 H.264 VGA IP Camera M2.1.6 - Arbitrary File DisclosureTattile Camera /api/v1/security/login 默认口令漏洞(CVE-2026-26341)PoCCVE-2026-26341: Tattile Camera < 1.181.5 - Default Login天地伟业Easy7 /Easy7/rest/inquestRoom/isHashCameraAuth SQL 注入漏洞PoCbrickcom-camera-default-login: Brickcom Camera - Default LoginPoCbrickcom-camera-unauth-snapshot: Brickcom Camera - Unauthenticated Snapshot AccessPoCCVE-2025-1338: NUUO Camera <=20250203 - OS Command InjectionAllsky Camera /execute.php cmd 命令执行漏洞Allsky Camera /execute.php id 命令执行漏洞(CVE-2025-63414)PoCCVE-2010-4231: Camtron CMNC-200 IP Camera - Directory Traversal