CVE-2017-20214 CRITICAL

CVE-2017-20214: FLIR Thermal Camera F/FC/PT/D firmware version 8.0.0.64 Hard-Coded SSH Credentials Vulnerability

Vendor Flir Systems, Inc.
Product FLIR Thermal Camera F/FC/PT/D
Weakness CWE-798 · Hardcoded credentials
Published January 7, 2026
Last update April 7, 2026
View on NVD All CVEs

CVSS base score

9.3/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

What the vulnerability does

01Description

FLIR Thermal Camera F/FC/PT/D firmware version 8.0.0.64 contains hard-coded SSH credentials that cannot be changed through normal camera operations. Attackers can leverage these persistent, unmodifiable credentials to gain unauthorized remote access to the thermal camera system.

Key dates

02Disclosure timeline

January 7, 2026 CVE published
April 7, 2026 Record updated

Related vulnerabilities

04Related CVE

CVE-2026-7579 AstrBotDevs AstrBot Dashboard auth.py hard-coded credentials CVE-2026-4219 INDEX Conferences & Exhibitions Organization YWF BPOF APGCS App ae.index.apgcs BuildConfig.java hard-coded credentials CVE-2021-31579 Akkadian Provisioning Manager Engine (PME) Hard-Coded Credentials CVE-2026-26218 newbee-mall Default Seeded Administrator Credentials Allow Account Takeover CVE-2026-45039 RustFS: Internode RPC HMAC secret falls back to public default credential, enabling peer impersonation