Notice of Potential Security Device Vulnerability | FLIR systems

Update - Notice of Potential Security Device Vulnerability

Tuesday, March 28, 2017


Updated: 9/26/2017

On Friday March 3rd, an independent security researcher discovered a vulnerability that affected many products manufactured by an OEM vendor. This vulnerability potentially allows unauthorized access to certain IP cameras, and network digital video recorders.

This issue potentially makes access ports available to the public internet using methods such as DDNS, or port forwarding enabling remote access. Certain FLIR and Lorex branded products that are produced by the OEM vendor may be affected by this vulnerability. We are devoting our full attention to resolving this issue and protecting our customers.

There is some good news to share. Many of these products are already protected from this vulnerability due to the external connection being managed by FLIR’s Cloud connection service. With the device connected to the internet via the FLIR Cloud service, we have confirmed that these devices are no longer vulnerable to this issue. However, within a local network, the affected devices are still susceptible to this vulnerability from sources the same local network, but this threat is much more limited.

Until this issue is resolved, our recommendation is to immediately disable DDNS, disable all port forwarding and, if available, turn off UPnP. We are continuing to work with the OEM vendor to discover exactly which products are affected, and when patches will be available. As soon as we have more information, we will be clearly communicating everything to our distribution channel partners and through our corporate website. We will provide instructions on how to determine if a particular product is affected, as well as how to apply any required firmware updates.

For additional assistance, please call customer support at 1-866-816-5919.

Please note that the following product lines are NOT affected by this vulnerability:

  • FC-Series ID, FC-Series S, FC-Series R
  • PT-Series, F-Series, D-Series
  • Ariel, Quasar
  • Meridian, Horizon, Latitude Series
  • TRK, IoI
  • FLIR FX, FLIR Secure HD
  • DNR700-Series and DNR800-Series NVRs
  • M5100 Series DVRs
  • N357V8 / N357B8

FIRMWARE UPDATE

Firmware upgrades and instructions are available for the following models. Please check back here for upgrades on further models and please provide your contact information below to receive notification when updates on this issue are available.

IP Cameras

For instructions to determine the model number of your camera(s) and to upgrade with the appropriate firmware, please download one of the options below:

For an Individual IP Camera, download the instructions here

For Multiple IP Cameras, download instructions here

Ensure you have also downloaded the ConfigTool on the same computer: download ConfigTool

Recorders

Find the model number of your recorder to determine the correct firmware file to download:

1. From the live viewing screen, right-click to open the Quick Menu. Click Info.

2. The model number is shown on screen.

Find your model number in the list below, download the firmware using the instructions below:

  • To update recorders locally, download instructions here
  • To update recorders remotely, download instructions here

IP Camera Firmware

Model Firmware Version Download fw
DNB23TF2 V2.400.FL00.4.R Download
DNE12TL2 V2.212.GM00.1.R Download
DNV16M2 / DNB13TF2 V2.211.GM00.1.R Download
DNZ30TL2R (Camera Module) V2.420.FL08.8.R Download
DNZ30TL2R (Lens Module) V2.09.65.R Download
N133ED V2.212.FL00.1.R Download
N133BD V2.212.FL00.1.R Download
N233ZC / N233ZD / N233BE / N233EE / N233VE V2.420.FL00.3.R Download
N237BE V2.420.FL00.3.R Download
N237VE V2.420.FL00.3.R Download
N243BW2 / N243EW2 / N243EW4 / N243BW4 V2.400.FL00.12.R Download
N243MW2 V2.400.FL00.12.R Download
N243VW4 V2.400.FL00.15.R Download
N247B3 / N247V3 V2.400.FL00.12.R Download
N253V8 / N253B8 V2.400.FL00.17.R Download
N336ZD1 V2.210.GM01.0.R Download
N336ZD3 V2.400.FL02.0.R Download
N347BW4 / N347VW4 V2.400.FL00.12.R Download
N437BDL / N437BEW / N437VEW / N437VDL V2.400.FL00.3.R Download
PB133E V2.420.FL00.11.R Download
PE133E V2.420.FL00.11.R Download
PE133F / PB133F V2.400.FL00.6.R Download
P143B4 / P143E4 V2.460.FL01.9.R Download

DVR Firmware

Model Firmware Version Download fw
M3104 V.20170923_00019 Download
M3104ES V.20150615_00023 Download
M3104EX V.20161102_00018 Download
M3104ESP V.20150723_00003 Download
M3108 V.20170923_00019 Download
M3108ES V.20150615_00023 Download
M3108EX V.20161104_00018 Download
M3108ESP V.20150722_00003 Download
M3116ES V.20150615_00023 Download
M3116ESP V.20150902_00003 Download
M3116EX V.20161105_00018 Download
M3204 V.20170520_00020 Download
M3204P V.20170623_00006 Download
M3208 V.20170520_00020 Download
M3208P V.20170623_00006 Download
M3216 V.20170520_000020 Download
M3216P V.20170622_00006 Download
M4108EX V.20161105_00018 Download
M4116EX V.20161129_00018 Download
M4204 V.20170520_00020 Download
M4204P V.20170623_00006 Download
M4208 V.20170520_000020 Download
M4208P V.20170622_00006 Download
M4216EX V.20161129_00018 Download
M4416 V.20160725_00022 Download
M4416P V.20150831_00007 Download

NVR Firmware

Model Firmware Version Download fw
DN208 V.20150117_00018 Download
DNR104 V.20150117_00018 Download
DNR114S V.20150727_00018 Download
DNR114SP V.20150730_00010 Download
DNR118S V.20150727_00018 Download
DNR208 V.20150117_00018 Download
DNR216 V.20150117_00018 Download
DNR308 V.20150105_00016 Download
DNR316 V.20150105_00016 Download
DNR408 V.20160701_00039 Download
DNR408P V.20161222_00015 Download
DNR408S V.20160104_00019 Download
DNR416 V.20160701_00039 Download
DNR416P V.20161222_00015 Download
DNR416RS V.20160412_00018 Download
DNR432S V.20160412_00018 Download
DNR516 V.20160701_00039 Download
DNR516P V.20161222_00015 Download
DNR516S V.20160809_00018 Download
DNR532 V.20160701_00039 Download
DNR532P V.20161222_00015 Download
DNR532S V.20160809_00018 Download

Guides

Disabling DDNS on FLIR Recorders (Published 3/10/17)
FLIR IP and MPX Remote Access Setup (Video, Published 3/13/17)  

Recent Posts:

Categories:

COMMENTS