CVE-2022-37062: All FLIR AX8 thermal sensor cameras version up to and including 1.46.16 are affected by an insecure design...

Security readout for executives and security teams

Some FLIR AX8 thermal cameras could let anyone who can reach the device download the local user database. That database may contain usernames and password hashes. This matters because exposed device credentials can help attackers compromise cameras or pivot into connected operational environments. Vendor information says firmware 1.49.16 should no longer be affected. Organizations using FLIR AX8 automation thermal cameras are the likely exposure group, especially devices reachable from untrusted networks. The bundle does not provide CPEs, CVSS, deployment counts, or internet exposure data. Prioritize remediation for internet-reachable or operationally important AX8 cameras. The main business risk is credential exposure from unauthenticated access, with possible downstream compromise if reused or weak passwords are present. Mitigation focus: Inventory FLIR AX8 cameras and record firmware versions.; Update affected cameras to firmware 1.49.16 or later where supported.; Check FLIR guidance for current firmware and operational constraints..

Prepared

Jun 2, 2026, 02:07 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.