What’s Vulnerable › Vulnerabilities

CVE-2018-25141: FLIR Thermal Traffic Cameras V1.01-0bb5b27 Unauthenticated RTSP Stream Disclosure

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-12-24 · updated 2026-06-17
• Weakness: CWE-306

Description

FLIR thermal traffic cameras contain an unauthenticated vulnerability that allows remote attackers to access live video streams without credentials. Attackers can directly retrieve video streams by accessing specific endpoints like /live.mjpeg, /snapshot.jpg, and RTSP streaming URLs without authentication.

Affected products

• FLIR Thermal Traffic Cameras: 1.01-0bb5b27

References

• https://www.exploit-db.com/exploits/45537
• https://www.flir.com
• https://www.zeroscience.mk/en/vulnerabilities/ZSL-2018-5489.php
• https://www.exploit-db.com/exploits/45537
• https://www.zeroscience.mk/en/vulnerabilities/ZSL-2018-5489.php

Get alerted when CVE-2018-25141 or the next vulnerability affects your stack