Vulnerability · Published Jul 14, 2025 · Assigned by VulDB
CVE-2025-7576Teledyne FLIR FB-Series O/FLIR FH-Series ID Production Tools production.html access control
High 7.3
In plain English
A high-severity improper access control in FLIR FB-Series O from Teledyne. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 34% of all known vulnerabilities).
Official description
A vulnerability was found in Teledyne FLIR FB-Series O and FLIR FH-Series ID 1.3.2.16 and classified as critical. Affected by this issue is some unknown functionality of the file /priv/production/production.html of the component Production Tools. The manipulation leads to improper access controls. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Teledyne | FLIR FB-Series O | 1.3.2.16 |
| Teledyne | FLIR FH-Series ID | 1.3.2.16 |
Weakness: CWE-284, CWE-266 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R
References
- VDB-316274 | Teledyne FLIR FB-Series O/FLIR FH-Series ID Production Tools production.html access control vdb-entry
- VDB-316274 | CTI Indicators (IOB, IOC, TTP, IOA) signature, permissions-required
- Submit #609549 | FLIR FLIR FB-Series O FLIR FB-Series O and ID Firmware, Version 1.3.2.16 Improper Access Controls third-party-advisory
- https://github.com/waiwai24/0101/blob/main/CVEs/FLIR/Production_html_Management_Backend_Unauthorized_Access.md related
- https://github.com/waiwai24/0101/blob/main/CVEs/FLIR/Production_html_Management_Backend_Unauthorized_Access.md#poc exploit