CVE-2017-20216
FLIR Thermal Camera PT-Series firmware version 8.0.0.64 contains multiple unauthenticated remote command injection vulnerabilities in the controllerFlirSystem.php script. Attackers can execute arbi...
Affects 0 products across 3 vendors.
Attacker injects OS commands through application inputs passed to system() or equivalent calls, leading to arbitrary command execution.
Mapping is CWE-to-CAPEC per MITRE CAPEC 3.9.
FLIR Thermal Camera PT-Series firmware version 8.0.0.64 is vulnerable to unauthenticated remote command injection, allowing attackers to execute arbitrary system commands as root.
BSID: BS-2026-GLOBAL-118594-C • Model: /workspace/models/qwen2.5-coder-32b-instruct-bf16 • Confidence: HIGH
Is this CVE in your environment?
BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.
Check My Environment →What is CVE-2017-20216?
What is the CVSS score for CVE-2017-20216?
Is CVE-2017-20216 actively exploited?
How do I remediate CVE-2017-20216?
What systems are affected by CVE-2017-20216?
| CVE ID | CVE-2017-20216 |
|---|---|
| BSID | BS-2026-GLOBAL-118594-C BreachSpider Global ID |
| CVSS Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| Published | 2026-01-08 |
| Last Modified | 2026-04-15 |
| ICS Relevance | 15% |
| Weakness (CWE) | |
| Source | NVD |
FLIR Thermal Camera PT-Series firmware version 8.0.0.64 contains multiple unauthenticated remote command injection vulnerabilities in the controllerFlirSystem.php script. Attackers can execute arbitrary system commands as root by exploiting unsanitized POST parameters in the execFlirSystem() function through shell_exec() calls. Exploitation evidence was observed by the Shadowserver Foundation on 2026-01-06 (UTC).
Source: NIST NVD / MITRE CVE Database
Attackers can exploit unsanitized POST parameters in the execFlirSystem() function within the controllerFlirSystem.php script, which uses shell_exec() to execute commands. This vulnerability can be exploited remotely without authentication.
Exploitation Likelihood: CRITICAL
| Vendor | Product | Fixed Version |
|---|---|---|
| Flir | — | — |
| Foundation | — | — |
| Script | — | — |
No patch URL on record. Monitor vendor security advisories directly.
| CISA KEV | Not in KEV catalog |
|---|---|
| Public Exploit | Not confirmed |
| PoC Code | Not confirmed |
SAGE Enrichment Record — provenance & audit hash
| Model | /workspace/models/qwen2.5-coder-32b-instruct-bf16 |
|---|---|
| Confidence | HIGH |
| Enriched At | 2026-05-24 |
| SHA-512 Audit Hash | acacfbc659b70fd1e590e0ab1071a20f7404fa01956d5369b7448faebc487788c0f73659ccf675d3ed77109df82e1204b8a0360dd141ba7094fb4e26578bb614 |
Critical Severity - Know Your Exposure
A CVSS 9.8 vulnerability in your ICS environment cannot wait. BreachSpider maps critical CVEs to your specific assets and tells you what to fix first.
Check Your Assets Free →