Teledyne FLIR vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Teledyne FLIR products: 6 record(s), with severity, exploitation and fixes.

Exploited only (KEV) →

CVE-2026-55396 High · 8.5 CWE-319 Oct 1, 2026

Unencrypted UDP Control Traffic in Teledyne FLIR Robots running Aware2

Cleartext transmission without a cryptographic integrity check in operator control unit to robot UDP traffic in Teledyne FLIR Aware2 versions through 6.9.0.2 (PackBot) and 1.7.9 (FirstLook) allows adjacent unauthenticated attackers to intercept, hijack, or modify control traffic against Teledyne FLIR PackBot and FirstLook robots running this software via sniffing or hijacking network traffic.

CVE-2026-55395 Critical · 9.4 CWE-798 Oct 1, 2026

Hardcoded Passwords in Teledyne FLIR Robots running Aware2

Hardcoded passwords in the access control in Teledyne FLIR Aware2 versions through 6.9.0.2 (PackBot) and 1.7.9 (FirstLook) allows remote unauthenticated attackers to access and reconfigure Teledyne FLIR PackBot and FirstLook robots running this software via reading the passwords from the firmware or documentation.

CVE-2026-55394 Medium · 5.3 CWE-319 Oct 1, 2026

Unencrypted 802.11 Network in Teledyne FLIR Robots running Aware2

Unencrypted traffic in the 802.11 network of Teledyne FLIR Aware2 versions through 6.9.0.2 allows adjacent unauthenticated attackers to intercept, hijack, or modify session traffic against Teledyne FLIR PackBot robots running this software via sniffing or hijacking network traffic.

CVE-2026-55393 Critical · 10.0 CWE-22 Oct 1, 2026

Local File Inclusion in Teledyne FLIR Robots running Aware2

Unvalidated pathnames in the web interface in Teledyne FLIR Aware2 versions through 6.9.0.2 (PackBot) and 1.7.9 (FirstLook) allows remote unauthenticated attackers to read configuration and security parameters on Teledyne FLIR PackBot and FirstLook robots running this software via path traversal.

CVE-2026-14984 Critical · 9.4 CWE-319 Oct 1, 2026

Cleartext HTTP for Control Traffic in Teledyne FLIR Robots running Aware2

Cleartext transmission in the primary control endpoints of Teledyne FLIR Aware2 versions through 6.9.0.2 allows remote unauthenticated attackers to intercept, hijack, or modify session traffic against Teledyne FLIR PackBot robots running this software via sniffing or hijacking network traffic.

CVE-2026-14983 High · 7.1 CWE-306 Oct 1, 2026

Missing Authentication in Teledyne FLIR Robots running Aware2

Missing authentication in the web interface in Teledyne FLIR Aware2 versions through 6.9.0.2 allows remote unauthenticated attackers to achieve denial of service against Teledyne FLIR PackBot robots running this software via misuse of the reboot endpoint.