VulnerabilityModified
CVE-2024-22028
By accessing the affected product physically, an attacker may retrieve the internal data.
MEDIUM 4.6EPSS 0.24%
Does this matter?
Lower severity and a low EPSS score (0.24%). Track it; it rarely justifies an emergency change on its own.
Description
Insufficient technical documentation issue exists in thermal camera TMC series all firmware versions. The user of the affected product is not aware of the internally saved data. By accessing the affected product physically, an attacker may retrieve the internal data.
- CVSS 3.1
- 4.6 MEDIUMCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- EPSS
- 0.24% probability · 15th percentile
- CISA KEV
- Not listed
- Affected
- 3rrr-btob/3r-tmc01 firmware · 3rrr-btob/3r-tmc02 firmware · 3rrr-btob/3r-tmc03 firmware · 3rrr-btob/3r-tmc04 firmware · 3rrr-btob/3r-tmc05 firmware · 3rrr-btob/3r-tmc06 firmware
- Source
- vultures@jpcert.or.jp
References
- https://3rrr-btob.jp/archives/news/23624Product
- https://jvn.jp/en/jp/JVN96240417/Third Party Advisory
- https://3rrr-btob.jp/archives/news/23624Product
- https://jvn.jp/en/jp/JVN96240417/Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.