CVE-2018-25139 HIGH

CVE-2018-25139: FLIR AX8 Thermal Camera 1.32.16 Unauthenticated RTSP Stream Disclosure

Vendor Flir Systems, Inc.
Product FLIR AX8 Thermal Camera
Weakness CWE-306 · Missing auth
Published December 24, 2025
Last update December 24, 2025
View on NVD All CVEs

CVSS base score

8.7/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

What the vulnerability does

01Description

FLIR AX8 Thermal Camera 1.32.16 contains an unauthenticated vulnerability that allows remote attackers to access live video streams without credentials. Attackers can directly connect to the RTSP stream using tools like VLC or FFmpeg to view and record thermal camera footage.

Key dates

02Disclosure timeline

December 24, 2025 CVE published
December 24, 2025 Record updated