← Zuruck zu CVEs

CVE-2018-25137

HIGH

7.5

Beschreibung

FLIR Brickstream 3D+ 2.1.742.1842 contains an unauthenticated vulnerability in the ExportConfig REST API that allows attackers to download sensitive configuration files. Attackers can exploit the getConfigExportFile.cgi endpoint to retrieve system configurations, potentially enabling authentication bypass and privilege escalation.

CVE Details

CVSS v3.1 Bewertung7.5

SchweregradHIGH

CVSS VektorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AngriffsvektorNETWORK

KomplexitatLOW

Erforderliche PrivilegienNONE

BenutzerinteraktionNONE

Veroffentlicht12/24/2025

Zuletzt geandert12/29/2025

Quellenvd

Honeypot-Sichtungen0

Schwachen (CWE)

CWE-306

Referenzen

http://www.brickstream.com(disclosure@vulncheck.com)

https://www.exploit-db.com/exploits/45599(disclosure@vulncheck.com)

https://www.zeroscience.mk/en/vulnerabilities/ZSL-2018-5495.php(disclosure@vulncheck.com)

https://www.zeroscience.mk/en/vulnerabilities/ZSL-2018-5495.php(134c704f-9b21-4f2e-91b3-4a467353bcc0)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.