{"uuid": "f08acc34-f890-4268-8d4f-42610ad930c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-37061", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/flir_ax8_unauth_rce_cve_2022_37061.rb", "content": "{\"aliases\": [], \"arch\": \"cmd, armle\", \"author\": [\"Thomas Knudsen (https://www.linkedin.com/in/thomasjknudsen)\", \"Samy Younsi (https://www.linkedin.com/in/samy-younsi)\", \"h00die-gr3y\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"All FLIR AX8 thermal sensor cameras versions up to and including 1.46.16 are vulnerable to Remote Command Injection.\\n          This can be exploited to inject and execute arbitrary shell commands as the root user through the id HTTP POST parameter\\n          in the res.php endpoint.\\n\\n          This module uses the vulnerability to upload and execute payloads gaining root privileges.\", \"disclosure_date\": \"2022-08-19\", \"fullname\": \"exploit/linux/http/flir_ax8_unauth_rce_cve_2022_37061\", \"is_install_path\": true, \"mod_time\": \"2025-12-17 16:12:31 +0000\", \"name\": \"FLIR AX8 unauthenticated RCE\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\", \"artifacts-on-disk\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/linux/http/flir_ax8_unauth_rce_cve_2022_37061.rb\", \"platform\": \"Linux,Unix\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"linux/http/flir_ax8_unauth_rce_cve_2022_37061\", \"references\": [\"CVE-2022-37061\", \"PACKETSTORM-168114\", \"URL-https://attackerkb.com/topics/UAZaDsQBfx/cve-2022-37061\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Unix Command\", \"Linux Dropper\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:33.903371Z"}