Teledyne FLIR Aware2: Hardcoded passwords in access control
Summary
Teledyne FLIR Aware2 versions up to 6.9.0.2 (PackBot) and up to 1.7.9 (FirstLook) use hardcoded, shared administrative passwords. The same credentials are used across the product line, affecting the robots, operator control units and mesh radio modules. An attacker who obtains a password from the firmware or documentation can log in with full administrative rights, run commands as root, change configurations, access data or disable the system. The CVSS vector requires adjacent network access, while the CVE description speaks of remote unauthenticated attackers; this discrepancy is not yet resolved.
Affected
- Teledyne FLIR Aware2 for PackBot: versions through 6.9.0.2
- Teledyne FLIR Aware2 for FirstLook: versions through 1.7.9
Fixed in
Unknown. No patched version is published. Contact Teledyne (UGS-CHELMSFORD-TEAMS-FSE@Teledyne.com) for updated software and remediation instructions.
Workaround
- No CVE-specific workaround is published.
- Isolate the robot control network and restrict traffic to the operator control unit (general hardening, not an official mitigation).
- Ask Teledyne whether per-device credentials can be set.
Exploitation
- No public proof of concept, according to Mandiant.
- No known exploitation in the wild; CISA SSVC: exploitation none, automatable no.
- EPSS 0.00185 at the time of the snapshot.
Our recommendation
- Check whether PackBot or FirstLook robots, operator control units or mesh modules are in use. If not, no action needed.
- Contact Teledyne now for updated software and remediation instructions.
- Restrict network access to the robots and their management interfaces, monitor for unexpected logins and review physical access controls.
Public exploits
PoC-in-GitHub, Metasploit and Exploit-DB list nothing for this CVE.
Research sources
- Mandiant advisory MNDT-2026-0031 github.com
- Vulners CVE-2026-55395 vulners.com
- OpenCVE CVE-2026-55395 app.opencve.io
- VulDB CVE-2026-55395 vuldb.com
- Strix CVE-2026-55395 www.strix.ai
- CVE aggregator intel 823104 cve.imfht.com
Researched and written up in English and German by an AI (Claude by Anthropic) based on NVD, CISA, EPSS and the sources listed. The vendor information is authoritative. Researched on 31 Oct 2026, 00:16.
Original description (NVD)
Hardcoded passwords in the access control in Teledyne FLIR Aware2 versions through 6.9.0.2 (PackBot) and 1.7.9 (FirstLook) allows remote unauthenticated attackers to access and reconfigure Teledyne FLIR PackBot and FirstLook robots running this software via reading the passwords from the firmware or documentation.
Sources
The tracker combines official, freely usable data sources – updated continuously:
- NVD (NIST) – CVEs, rating (CVSS), affected products
- CISA KEV – vulnerabilities confirmed by CISA as actively exploited
- CISA Vulnrichment – CISA assessment (SSVC) in the official CVE record
- FIRST EPSS – probability of exploitation
- Microsoft MSRC – Patch Tuesday: vulnerabilities, severity, updates
- PoC-in-GitHub – public proof-of-concept repositories
- Metasploit (Rapid7) – modules of the Metasploit Framework
- Exploit-DB (OffSec) – archive of public exploits (links only)
- Patch days: official vendor pages (linked per vendor) (Vendor patch days)
This product uses data from the NVD API but is not endorsed or certified by the NVD. EPSS data © FIRST.org.
Affected? We can help.
We check whether your systems are affected, install updates and close the gap – continuously with the System Health Checker if you wish.