CVE-2023-51126

Summary

CVE-2023-51126 is a command injection vulnerability affecting FLIR AX8 up to version 1.46.16. The vulnerability is located in the /usr/www/res.php file. Attackers can exploit this weakness by supplying malicious input in the value parameter, which is then executed as a command. This issue may result in unauthorized access, data theft, or unintended system modifications. Users are strongly advised to update their systems to the latest available version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.