CVE-2024-31202

CVE-2024-31202 concerns ThermoscanIP. Root cause: CWE-732 — incorrect permission assignment for a critical resource in the ThermoscanIP installation folder. This misconfiguration enables a local attacker with low privileges and no user interaction to achieve Local Privilege Escalation. CVSSv3.1 m...

CVE-2024-31203

CVE-2024-31203 describes a CWE-121 stack-based buffer overflow in the wd210std.dll library packaged with ThermoscanIP installer. The vulnerability allows a local attacker to trigger a Denial-of-Service condition on the target component. The available sources consistently identify the affected com...

CVE-2024-31201

CVE-2024-31201 affects the ThermoscanIP Scrutation service. The root cause is a CWE-428 Unquoted Search Path or Element, which can be abused when the C:\ path permissions are misconfigured, potentially enabling local privilege escalation. Exploitation details are not provided in the documents. Re...