CVE:CVE-2018-3813
CNNVD:CNNVD-201801-002
FLIR Brickstream 2300是加拿大FLIR公司的一款顾客流量分析统计设备。
FLIR Brickstream 2300 2.0 4.1.53.166版本中的getConfigExportFile.cgi文件存在访问控制错误漏洞。攻击者可利用该漏洞获取信息。
solution:Upgrade flir brickstream_2300_2d_firmware to a higher version than 2.0_4.1.53.166,and avoid the version 2.0_4.1.53.166; Upgrade flir brickstream_2300_3d_firmware to a higher version than 2.0_4.1.53.166,and avoid the version 2.0_4.1.53.166; Upgrade flir brickstream_2300_3d+_firmware to a higher version than 2.0_4.1.53.166,and avoid the version 2.0_4.1.53.166