Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-37021 State: PUBLISHED Published: 2022-08-31T07:00:14 Last Updated: 2024-08-03T10:21:32.657Z Vendors: Apache Software Foundation Products: Apache Geode Problem Types: CWE-502 Description: Apache Geode versions up to 1.12.5, 1.13.4 and 1.14.0 are vulnerable to a deserialization of untrusted data flaw when using JMX over RMI on Java 8. Any user still on Java 8 who wishes to protect against deserialization attacks involving JMX or RMI should upgrade to Apache Geode 1.15 and Java 11. If upgrading to Java 11 is not possible, then upgrade to Apache Geode 1.15 and specify "--J=-Dgeode.enableGlobalSerialFilter=true" when starting any Locators or Servers. Follow the documentation for
specify "--J=-Dgeode.enableGlobalSerialFilter=true" when starting any Locators or Servers. Follow the documentation for details on specifying any user classes that may be serialized/deserialized with the "serializable-object-filter" configuration option. Using a global serial filter will impact performance. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread/qrvhmytsshsk5xcb68pwccw3y6m8o8nr
CVE ID: CVE-2022-37022 State: PUBLISHED Published: 2022-08-31T07:00:15 Last Updated: 2024-08-03T10:21:32.458Z Vendors: Apache Software Foundation Products: Apache Geode Problem Types: CWE-502 Description: Apache Geode versions up to 1.12.2 and 1.13.2 are vulnerable to a deserialization of untrusted data flaw when using JMX over RMI on Java 11. Any user wishing to protect against deserialization attacks involving JMX or RMI should upgrade to Apache Geode 1.15. Use of 1.15 on Java 11 will automatically protect JMX over RMI against deserialization attacks. This should have no impact on performance since it only affects JMX/RMI which Gfsh uses to communicate with the JMX Manager which is hosted
impact on performance since it only affects JMX/RMI which Gfsh uses to communicate with the JMX Manager which is hosted on a Locator. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread/kr1y4l9752g1ww1shnmh8dbfjq785k4m
CVE ID: CVE-2022-37023 State: PUBLISHED Published: 2022-08-31T07:00:16 Last Updated: 2024-08-03T10:21:32.603Z Vendors: Apache Software Foundation Products: Apache Geode Problem Types: CWE-502 Description: Apache Geode versions prior to 1.15.0 are vulnerable to a deserialization of untrusted data flaw when using REST API on Java 8 or Java 11. Any user wishing to protect against deserialization attacks involving REST APIs should upgrade to Apache Geode 1.15 and follow the documentation for details on enabling "validate-serializable-objects=true" and specifying any user classes that may be serialized/deserialized with "serializable-object-filter". Enabling "validate-serializable-objects" may im
s that may be serialized/deserialized with "serializable-object-filter". Enabling "validate-serializable-objects" may impact performance. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread/6js89pbqrp52zlpwgry5fsdn76gxbbfj
CVE ID: CVE-2022-37024 State: PUBLISHED Published: 2022-08-09T15:15:36 Last Updated: 2024-08-03T10:21:32.557Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, and OpUtils before 2022-07-29 through 2022-07-30 ( 125658, 126003, 126105, and 126120) allow authenticated users to make database changes that lead to remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.manageengine.com/itom/advisory/cve-2022-37024.html
CVE ID: CVE-2022-37025 State: PUBLISHED Published: 2022-08-18T12:23:57 Last Updated: 2024-08-03T10:21:32.462Z Vendors: n/a Products: n/a Problem Types: n/a Description: An improper privilege management vulnerability in McAfee Security Scan Plus (MSS+) before 4.1.262.1 could allow a local user to modify a configuration file and perform a LOLBin (Living off the land) attack. This could result in the user gaining elevated permissions and being able to execute arbitrary code due to lack of an integrity check of the configuration file. Additional Analyst Notes: - CVE Program Container: References: - https://www.mcafee.com/en-us/antivirus/mcafee-security-scan-plus.html - https://attack.mitre.org/t
tainer: References: - https://www.mcafee.com/en-us/antivirus/mcafee-security-scan-plus.html - https://attack.mitre.org/techniques/T1218/ - https://www.mcafee.com/support/?articleId=TS103335&page=shell&shell=article-view
CVE ID: CVE-2022-37026 State: PUBLISHED Published: 2022-09-21T00:00:00.000Z Last Updated: 2025-05-27T18:19:43.782Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Erlang/OTP before 23.3.4.15, 24.x before 24.3.4.2, and 25.x before 25.0.2, there is a Client Authentication Bypass in certain client-certification situations for SSL, TLS, and DTLS. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/erlang/otp/compare/OTP-23.3.4.14...OTP-23.3.4.15 - https://erlangforums.com/c/erlang-news-announcements/91 - https://erlangforums.com/t/otp-25-1-released/1854 - https://lists.debian.org/debian-lts-announce/2023/07/msg00012.html
CVE ID: CVE-2022-37027 State: PUBLISHED Published: 2022-09-21T16:53:50.000Z Last Updated: 2025-05-28T14:02:03.721Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ahsay AhsayCBS 9.1.4.0 allows an authenticated system user to inject arbitrary Java JVM options. Administrators that can modify the Runtime Options in the web interface can inject Java Runtime Options. These take effect after a restart. For example, an attacker can enable JMX services and consequently achieve remote code execution as the system user. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ahsay.com/jsp/en/downloads/ahsay-downloads_latest-software_ahsaycbs.jsp
CISA ADP Vulnrichment: References: - https://www.ahsay.com/jsp/en/downloads/ahsay-downloads_latest-software_ahsaycbs.jsp - https://www.compass-security.com/en/research/advisories - https://wiki.ahsay.com/doku.php?id=public:resources:release_notes_v9320 - https://www.ahsay.com/partners/en/home/index.jsp?pageContentKey=ahsay_assets_latest_hotfix - https://www.compass-security.com/fileadmin/Research/Advisories/2022_12_CSNC-2022-009_AhsayCBS_Java_Runtime_Parameter_Injection.txt
CVE ID: CVE-2022-37028 State: PUBLISHED Published: 2022-09-27T17:19:15.000Z Last Updated: 2025-05-30T16:02:17.259Z Vendors: n/a Products: n/a Problem Types: n/a Description: ISAMS 22.2.3.2 is prone to stored Cross-site Scripting (XSS) attack on the title field for groups, allowing an attacker to store a JavaScript payload that will be executed when another user uses the application. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://excellium-services.com/cert-xlm-advisory/CVE-2022-37028 - https://www.isams.com/ - https://cds.thalesgroup.com/en/tcs-cert/CVE-2022-37028
CVE ID: CVE-2022-37030 State: PUBLISHED Published: 2022-08-04T22:04:04 Last Updated: 2024-08-03T10:21:32.491Z Vendors: n/a Products: n/a Problem Types: n/a Description: Weak permissions on the configuration file in the PAM module in Grommunio Gromox 0.5 through 1.x before 1.28 allow a local unprivileged user in the gromox group to have the PAM stack execute arbitrary code upon loading the Gromox PAM module. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.suse.com/show_bug.cgi?id=1201949 - http://www.openwall.com/lists/oss-security/2022/08/04/1
CVE ID: CVE-2022-37032 State: PUBLISHED Published: 2022-09-19T00:00:00 Last Updated: 2024-08-03T10:21:32.494Z Vendors: n/a Products: n/a Problem Types: n/a Description: An out-of-bounds read in the BGP daemon of FRRouting FRR before 8.4 may lead to a segmentation fault and denial of service. This occurs in bgp_capability_msg_parse in bgpd/bgp_packet.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/FRRouting/frr/commit/ff6db1027f8f36df657ff2e5ea167773752537ed - https://github.com/FRRouting/frr/commit/6d58272b4cf96f0daa846210dd2104877900f921 - https://bugzilla.suse.com/show_bug.cgi?id=1202023 - https://lists.debian.org/debian-lts-announce/2022/11/msg00039.
921 - https://bugzilla.suse.com/show_bug.cgi?id=1202023 - https://lists.debian.org/debian-lts-announce/2022/11/msg00039.html - https://www.debian.org/security/2023/dsa-5362
CVE ID: CVE-2022-37033 State: PUBLISHED Published: 2023-02-01T00:00:00.000Z Last Updated: 2025-03-27T16:21:33.289Z Vendors: n/a Products: n/a Problem Types: n/a Description: In dotCMS 5.x-22.06, TempFileAPI allows a user to create a temporary file based on a passed in URL, while attempting to block any SSRF access to local IP addresses or private subnets. In resolving this URL, the TempFileAPI follows any 302 redirects that the remote URL returns. Because there is no re-validation of the redirect URL, the TempFileAPI can be used to return data from those local/private hosts that should not be accessible remotely. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Ref
that should not be accessible remotely. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dotcms.com/security/SI-64
CVE ID: CVE-2022-37034 State: PUBLISHED Published: 2023-02-01T00:00:00.000Z Last Updated: 2025-03-27T16:14:45.446Z Vendors: n/a Products: n/a Problem Types: n/a Description: In dotCMS 5.x-22.06, it is possible to call the TempResource multiple times, each time requesting the dotCMS server to download a large file. If done repeatedly, this will result in Tomcat request-thread exhaustion and ultimately a denial of any other requests. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dotcms.com/security/SI-65
CVE ID: CVE-2022-37035 State: PUBLISHED Published: 2022-08-02T00:00:00.000Z Last Updated: 2025-11-04T16:09:47.299Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in bgpd in FRRouting (FRR) 8.3. In bgp_notify_send_with_data() and bgp_process_packet() in bgp_packet.c, there is a possible use-after-free due to a race condition. This could lead to Remote Code Execution or Information Disclosure by sending crafted BGP packets. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: References: - https://docs.google.com/document/d/1TqYEcZbFeDTMKe2N4XRFwyAjw_mynIHfvzwbx1fmJj8/edit?usp=sharing - https://github.com/FRRout
s://docs.google.com/document/d/1TqYEcZbFeDTMKe2N4XRFwyAjw_mynIHfvzwbx1fmJj8/edit?usp=sharing - https://github.com/FRRouting/frr/issues/11698 - https://lists.debian.org/debian-lts-announce/2024/04/msg00019.html
CVE ID: CVE-2022-37041 State: PUBLISHED Published: 2022-08-11T19:06:49 Last Updated: 2024-08-03T10:21:32.678Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in ProxyServlet.java in the /proxy servlet in Zimbra Collaboration Suite (ZCS) 8.8.15 and 9.0. The value of the X-Forwarded-Host header overwrites the value of the Host header in proxied requests. The value of X-Forwarded-Host header is not checked against the whitelist of hosts that ZCS is allowed to proxy to (the zimbraProxyAllowedDomains setting). Additional Analyst Notes: - CVE Program Container: References: - https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories - https://wiki.zimbra.com/wiki/Se
ogram Container: References: - https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories - https://wiki.zimbra.com/wiki/Security_Center
CVE ID: CVE-2022-37042 State: PUBLISHED Published: 2022-08-11T19:37:27.000Z Last Updated: 2025-10-21T23:15:36.754Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zimbra Collaboration Suite (ZCS) 8.8.15 and 9.0 has mboximport functionality that receives a ZIP archive and extracts files from it. By bypassing authentication (i.e., not having an authtoken), an attacker can upload arbitrary files to the system, leading to directory traversal and remote code execution. NOTE: this issue exists because of an incomplete fix for CVE-2022-27925. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories -
CVE Program Container: - CISA ADP Vulnrichment: References: - https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories - https://wiki.zimbra.com/wiki/Security_Center - http://packetstormsecurity.com/files/168146/Zimbra-Zip-Path-Traversal.html
CVE ID: CVE-2022-37043 State: PUBLISHED Published: 2022-08-11T19:40:25 Last Updated: 2024-08-03T10:21:32.610Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the webmail component in Zimbra Collaboration Suite (ZCS) 8.8.15 and 9.0. When using preauth, CSRF tokens are not checked on some POST endpoints. Thus, when an authenticated user views an attacker-controlled page, a request will be sent to the application that appears to be intended. The CSRF token is omitted from the request, but the request still succeeds. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories - https://wiki.zimbra.
s: - CVE Program Container: References: - https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories - https://wiki.zimbra.com/wiki/Security_Center
CVE ID: CVE-2022-37044 State: PUBLISHED Published: 2022-08-11T19:44:46 Last Updated: 2024-08-03T10:21:32.660Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Zimbra Collaboration Suite (ZCS) 8.8.15, the URL at /h/search?action accepts parameters called extra, title, and onload that are partially sanitised and lead to reflected XSS that allows executing arbitrary JavaScript on the victim's machine. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories - https://wiki.zimbra.com/wiki/Security_Center
CVE ID: CVE-2022-37047 State: PUBLISHED Published: 2022-08-18T00:00:00 Last Updated: 2024-08-03T10:21:32.468Z Vendors: n/a Products: n/a Problem Types: n/a Description: The component tcprewrite in Tcpreplay v4.4.1 was discovered to contain a heap-based buffer overflow in get_ipv6_next at common/get.c:713. NOTE: this is different from CVE-2022-27940. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/appneta/tcpreplay/issues/734 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ECRCFJ6X3IVB7BT4KS6AHQMSL532YXYD/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5B7
KS6AHQMSL532YXYD/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5B75AFRJUGOYHCFG2ZV2JKSUPA6MSCT5/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWRZO7BG6DHA5NAC3COB45WFXLYRIERC/ - https://security.gentoo.org/glsa/202210-08
CVE ID: CVE-2022-37048 State: PUBLISHED Published: 2022-08-18T00:00:00 Last Updated: 2024-08-03T10:21:32.756Z Vendors: n/a Products: n/a Problem Types: n/a Description: The component tcprewrite in Tcpreplay v4.4.1 was discovered to contain a heap-based buffer overflow in get_l2len_protocol at common/get.c:344. NOTE: this is different from CVE-2022-27941. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/appneta/tcpreplay/issues/735 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ECRCFJ6X3IVB7BT4KS6AHQMSL532YXYD/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/messag
B7BT4KS6AHQMSL532YXYD/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5B75AFRJUGOYHCFG2ZV2JKSUPA6MSCT5/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWRZO7BG6DHA5NAC3COB45WFXLYRIERC/ - https://security.gentoo.org/glsa/202210-08
CVE ID: CVE-2022-37049 State: PUBLISHED Published: 2022-08-18T00:00:00 Last Updated: 2024-08-03T10:21:32.606Z Vendors: n/a Products: n/a Problem Types: n/a Description: The component tcpprep in Tcpreplay v4.4.1 was discovered to contain a heap-based buffer overflow in parse_mpls at common/get.c:150. NOTE: this is different from CVE-2022-27942. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/appneta/tcpreplay/issues/736 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ECRCFJ6X3IVB7BT4KS6AHQMSL532YXYD/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5B75AFRJU
MSL532YXYD/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5B75AFRJUGOYHCFG2ZV2JKSUPA6MSCT5/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWRZO7BG6DHA5NAC3COB45WFXLYRIERC/ - https://security.gentoo.org/glsa/202210-08
CVE ID: CVE-2022-37050 State: PUBLISHED Published: 2023-08-22T00:00:00.000Z Last Updated: 2025-11-03T19:27:17.566Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Poppler 22.07.0, PDFDoc::savePageAs in PDFDoc.c callows attackers to cause a denial-of-service (application crashes with SIGABRT) by crafting a PDF file in which the xref data structure is mishandled in getCatalog processing. Note that this vulnerability is caused by the incomplete patch of CVE-2018-20662. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.freedesktop.org/poppler/poppler/-/issues/1274 - https://gitlab.freedesktop.org/poppler/poppler/-/commit/dcd5bd
://gitlab.freedesktop.org/poppler/poppler/-/issues/1274 - https://gitlab.freedesktop.org/poppler/poppler/-/commit/dcd5bd8238ea448addd102ff045badd0aca1b990 - https://lists.debian.org/debian-lts-announce/2023/10/msg00022.html
CVE ID: CVE-2022-37051 State: PUBLISHED Published: 2023-08-22T00:00:00.000Z Last Updated: 2025-11-03T19:27:18.939Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Poppler 22.07.0. There is a reachable abort which leads to denial of service because the main function in pdfunite.cc lacks a stream check before saving an embedded file. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.freedesktop.org/poppler/poppler/-/issues/1276 - https://gitlab.freedesktop.org/poppler/poppler/-/commit/4631115647c1e4f0482ffe0491c2f38d2231337b - https://lists.debian.org/debian-lts-announce/2023/10/msg00022.html
CVE ID: CVE-2022-37052 State: PUBLISHED Published: 2023-08-22T00:00:00.000Z Last Updated: 2025-11-03T19:27:20.326Z Vendors: n/a Products: n/a Problem Types: n/a Description: A reachable Object::getString assertion in Poppler 22.07.0 allows attackers to cause a denial of service due to a failure in markObject. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.freedesktop.org/poppler/poppler/-/issues/1278 - https://gitlab.freedesktop.org/poppler/poppler/-/commit/8677500399fc2548fa816b619580c2c07915a98c
CVE ID: CVE-2022-37053 State: PUBLISHED Published: 2022-08-28T15:54:53 Last Updated: 2024-08-03T10:21:32.635Z Vendors: n/a Products: n/a Problem Types: n/a Description: TRENDnet TEW733GR v1.03B01 is vulnerable to Command injection via /htdocs/upnpinc/gena.php. Additional Analyst Notes: - CVE Program Container: References: - http://trendnet.com - https://drive.google.com/file/d/1P_-h5wNtRiyVToDUjRNZhsmtILINv7EL/view?usp=sharing
CVE ID: CVE-2022-37055 State: PUBLISHED Published: 2022-08-28T16:05:21 Last Updated: 2025-01-06T14:51:10.345534Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link Go-RT-AC750 GORTAC750_revA_v101b03 and GO-RT-AC750_revB_FWv200b02 are vulnerable to Buffer Overflow via cgibin, hnap_main, Additional Analyst Notes: - CVE Program Container: References: - https://www.dlink.com/en/security-bulletin/ - https://drive.google.com/file/d/1hmIk0jQoex4QDyjIUg_6yxi-J6ROCh8S/view?usp=sharing - https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10308
CVE ID: CVE-2022-37056 State: PUBLISHED Published: 2022-08-28T16:03:48 Last Updated: 2025-01-09T17:38:08.414Z Vendors: n/a Products: n/a Problem Types: CWE-78 Description: D-Link GO-RT-AC750 GORTAC750_revA_v101b03 and GO-RT-AC750_revB_FWv200b02 is vulnerable to Command Injection via /cgibin, hnap_main, Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://drive.google.com/file/d/127tqMUvAxQ4OlycoSNtcP0x2282Y75GJ/view?usp=sharing - https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10308
CVE ID: CVE-2022-37057 State: PUBLISHED Published: 2022-08-28T16:00:15 Last Updated: 2025-01-06T14:51:42.583347Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link Go-RT-AC750 GORTAC750_revA_v101b03 and GO-RT-AC750_revB_FWv200b02 are vulnerable to Command Injection via cgibin, ssdpcgi_main. Additional Analyst Notes: - CVE Program Container: References: - https://www.dlink.com/en/security-bulletin/ - https://drive.google.com/file/d/1_UUpraFTxxB97ujrgVLQZXQ8Q8M58BAF/view?usp=sharing - https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10308
CVE ID: CVE-2022-37059 State: PUBLISHED Published: 2022-08-29T12:54:51 Last Updated: 2024-08-03T10:21:32.751Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) in Admin Panel of Subrion CMS 4.2.1 allows attacker to inject arbitrary code via Login Field Additional Analyst Notes: - CVE Program Container: References: - https://drive.google.com/file/d/1lmU8zuyzyC9LHFXuXzamnkcLcjcfs0xE/view?usp=sharing
CVE ID: CVE-2022-37060 State: PUBLISHED Published: 2022-08-18T00:00:00.000Z Last Updated: 2025-10-17T19:19:35.089Z Vendors: n/a Products: n/a Problem Types: n/a Description: FLIR AX8 thermal sensor cameras version up to and including 1.46.16 is vulnerable to Directory Traversal due to an improper access restriction. An unauthenticated, remote attacker can exploit this by sending a URI that contains directory traversal characters to disclose the contents of files located outside of the server's restricted path. NOTE: The vendor has stated that with the introduction of firmware version 1.49.16 (Jan 2023) the FLIR AX8 should no longer be affected by the vulnerability reported. Latest firmware v
re version 1.49.16 (Jan 2023) the FLIR AX8 should no longer be affected by the vulnerability reported. Latest firmware version (as of Oct 2025, was released Jun 2024) is 1.55.16. Additional Analyst Notes: - CVE Program Container: References: - https://www.flir.com/products/ax8-automation/ - https://gist.github.com/Nwqda/9e16852ab7827dc62b8e44d6180a6899 - http://packetstormsecurity.com/files/168116/FLIR-AX8-1.46.16-Traversal-Access-Control-Command-Injection-XSS.html - https://www.zeroscience.mk/en/vulnerabilities/ZSL-2018-5493.php
CVE ID: CVE-2022-37061 State: PUBLISHED Published: 2022-08-18T00:00:00.000Z Last Updated: 2025-10-17T19:18:34.915Z Vendors: n/a Products: n/a Problem Types: n/a Description: All FLIR AX8 thermal sensor cameras version up to and including 1.46.16 are vulnerable to Remote Command Injection. This can be exploited to inject and execute arbitrary shell commands as the root user through the id HTTP POST parameter in the res.php endpoint. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with the root privileges. NOTE: The vendor has stated that with the introduction of firmware version 1.49.16 (Jan 2023) the FLIR AX8 should no longer be