FLIR Brickstream 3D+ Unauthenticated Configuration File Download Vulnerability

A vulnerability exists in the FLIR Brickstream 3D+ version 2.1.742.1842, specifically within the ExportConfig REST API. This unauthenticated vulnerability allows attackers to download sensitive configuration files from the system. Exploiting the getConfigExportFile.cgi endpoint can lead to the retrieval of system configurations, which may facilitate authentication bypass and privilege escalation.

Impact

Exploitation of this vulnerability could result in unauthorized access to sensitive system information, potentially allowing for authentication bypass and privilege escalation.

Reproduction

The vulnerability can be reproduced by sending a request to the ExportConfig REST API endpoint getConfigExportFile.cgi. This can be done using a tool like curl. The request will return sensitive configuration files that can be downloaded and reviewed.