{"id":"CVE-2024-3013","url":"https://www.cyber-defence.io/tools/cve/CVE-2024-3013","generatedAt":"2026-11-04T22:12:37.701Z","title":"Executing manipulation can lead to improper authorization.","description":"A flaw has been found in Teledyne FLIR AX8 up to 1.46.16. The impacted element is an unknown function of the file /tools/test_login.php?action=register of the component User Registration. Executing manipulation can lead to improper authorization. The attack may be performed from remote. The exploit has been published and may be used. Upgrading to version 1.49.16 is sufficient to resolve this issue. Upgrading the affected component is recommended. The vendor points out: \"FLIR AX8 internal web site has been refactored to be able to handle the reported vulnerabilities.\"","published":"2024-03-28T01:15:48.000Z","lastModified":"2026-06-17T07:43:08.000Z","status":"Modified","sourceIdentifier":"cna@vuldb.com","cvss":{"version":"4.0","score":2.1,"severity":"LOW","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M"},"cwe":["CWE-266","CWE-285"],"affected":["flir/flir ax8 firmware"],"epss":{"score":0.22987,"percentile":0.97754,"date":"2026-11-03","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"urgent","text":"EPSS puts the probability of exploitation in the next 30 days at 23.0%, higher than 98% of all known CVEs. Patch or mitigate before the next change window."},"changes":[],"references":[{"url":"https://h0e4a0r1t.github.io/2024/vulns/FLIR-AX8%20Fixed%20Thermal%20Cameras%20Register%20any%20user%20in%20the%20background--test_login.php.pdf","tags":["Broken Link"],"source":"cna@vuldb.com"},{"url":"https://vuldb.com/?ctiid.258299","tags":["Permissions Required","VDB Entry"],"source":"cna@vuldb.com"},{"url":"https://vuldb.com/?id.258299","tags":["Third Party Advisory","VDB Entry"],"source":"cna@vuldb.com"},{"url":"https://vuldb.com/?submit.301588","tags":["Third Party Advisory","VDB Entry"],"source":"cna@vuldb.com"},{"url":"https://h0e4a0r1t.github.io/2024/vulns/FLIR-AX8%20Fixed%20Thermal%20Cameras%20Register%20any%20user%20in%20the%20background--test_login.php.pdf","tags":["Broken Link"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://vuldb.com/?ctiid.258299","tags":["Permissions Required","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://vuldb.com/?id.258299","tags":["Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://vuldb.com/?submit.301588","tags":["Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2024-3013","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}