FLIR Systems AX8 Cameras Command Injection (CVE-2025-5126)

high Tenable OT Security Plugin ID 505185

Synopsis

The remote OT asset is affected by a vulnerability.

Description

A vulnerability was found in Teledyne FLIR AX8 up to 1.46.16. This vulnerability affects the function setDataTime of the file \usr\www\application\models\settingsregional.php. Performing manipulation of the argument year/month/day/hour/minute results in command injection. The attack may be initiated remotely. The exploit has been made public and could be used. Upgrading to version 1.49.16 is able to resolve this issue. Upgrading the affected component is recommended. The vendor points out: FLIR AX8 internal web site has been refactored to be able to handle the reported vulnerabilities.

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.

Solution

Refer to the vendor advisory.

Plugin Details

Severity: High

ID: 505185

File Name: tenable_ot_flirsystems_CVE-2025-5126.nasl

Version: 1.2

Type: remote

Family: Tenable.ot

Published: 2/19/2026

Updated: 2/20/2026

Supported Sensors: Tenable OT Security

Risk Information

VPR

Risk Factor: Medium

Score: 6.7

CVSS v3

Risk Factor: High

Base Score: 8.8

Temporal Score: 7.9

Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C

CVSS v4

Risk Factor: High

Base Score: 8.7

Threat Score: 7.4

Threat Vector: CVSS:4.0/E:P

Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Vulnerability Information

CPE: cpe:/o:flir:flir_ax8_firmware

Required KB Items: Tenable.ot/FLIRSystems

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 5/24/2025

Vulnerability Publication Date: 5/24/2025

Reference Information

CVE: CVE-2025-5126

CWE: 74, 77

Detections

Analytics