CVE-2017-20215 HIGH

CVE-2017-20215: FLIR Thermal Camera FC-S/PT firmware version 8.0.0.64 Authenticated OS Command Injection

Vendor Flir Systems, Inc.
Product FLIR Thermal Camera FC-S/PT
Weakness CWE-78
Published January 7, 2026
Last update April 7, 2026
View on NVD All CVEs

CVSS base score

8.7/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

What the vulnerability does

01Description

FLIR Thermal Camera FC-S/PT firmware version 8.0.0.64 contains an authenticated OS command injection vulnerability that allows attackers to execute shell commands with root privileges. Authenticated attackers can inject arbitrary shell commands through unvalidated input parameters to gain complete control of the thermal camera system.

Key dates

02Disclosure timeline

January 7, 2026 CVE published
April 7, 2026 Record updated