An authenticated OS command injection vulnerability in FLIR Thermal Camera FC-S/PT firmware allows an attacker to gain full root-level control of the device.

The device suffers from an OS command injection flaw triggered via unvalidated input in the maintenance/lanSettings/dns endpoint. An authenticated attacker can inject malicious shell commands into the dns[server2] parameter to achieve code execution with root privileges.

Successful exploitation grants an attacker complete control over the affected thermal camera. This compromise can lead to unauthorized surveillance, the exfiltration of sensitive video data, or the use of the camera as a pivot point for further lateral movement within the internal network. Given the CVSS score of 8.8, this represents a high-severity risk to operational security and network integrity.

Immediate Action: Contact FLIR Systems support to obtain the latest firmware update, as no public patch version is specified for this legacy vulnerability.

Proactive Monitoring: Monitor network traffic for unusual outbound connections originating from camera management interfaces and audit device access logs for suspicious administrative activity.

Compensating Controls: Restrict access to the camera management interface to trusted administrative IP addresses only, and employ a Web Application Firewall to filter malicious patterns in HTTP POST requests.

Public Exploit Available: Yes, a proof-of-concept exploit is available via ExploitDB (EDB-ID: 42788) and Packet Storm Security.

Given the availability of public exploit code and the high impact of root-level command injection, administrators must prioritize securing these devices. If firmware updates are unavailable, the devices should be isolated from the general network using VLANs or strict firewall rules to prevent unauthorized access to the management interface.