Skip to content
Fencer Vulns
high 8.8

CVE-2017-20215 in the critical feed json

FLIR Thermal Camera FC-S/PT firmware version 8.0.0.64 Authenticated OS Command Injection

published 2026-01-07 10 mo ago modified 2026-06-17 4 mo ago also EUVD-2026-1613

cvss
8.8
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
15.8%
EPSS 15.8% chance of exploitation in 30 days, percentile 96%
public exploits
0
none known

Summary

FLIR Thermal Camera FC-S/PT firmware version 8.0.0.64 contains an authenticated OS command injection vulnerability that allows attackers to execute shell commands with root privileges. Authenticated attackers can inject arbitrary shell commands through unvalidated input parameters to gain complete control of the thermal camera system.

Patch / fix

CISA SSVC

Exploitation
Proof of concept is public
Automatable
no
Technical impact
total
Assessed
10 mo ago

Exploit prediction

15.82% chance of exploitation in the next 30 days, higher than 96% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

  • zeroscience.mk https://www.zeroscience.mk/en/vulnerabilities/ZSL-2017-5437.php referenced PoC, tagged "exploit" by a source, unverified
  • exploit-db.com https://www.exploit-db.com/exploits/42788/ referenced PoC, tagged "exploit" by a source, unverified
  • packetstormsecurity.com https://packetstormsecurity.com/files/144325 referenced PoC, tagged "exploit" by a source, unverified
  • cxsecurity.com https://cxsecurity.com/issue/WLB-2017090207 referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by version score vector
CNA 4.0 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CNA 3.1 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CNA 4.0 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Affected products

  • FLIR Systems, Inc. FLIR Thermal Camera FC-S/PT

Classification

Weakness
  • CWE-78 Improper Neutralization of Special Elements used in an OS Command

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.