PT-2024-19162 · Unknown · Tmc Series

Hiroyuki Harada · Published 2024-01-15 · Updated 2024-01-22 · CVE-2024-22028

Positive Technologies (AI Summary)

CVSS v3.1

4.6

Medium

Base vector

AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions thermal camera TMC series all firmware versions

Description An insufficient technical documentation issue exists, where the user of the affected product is not aware of the internally saved data. By accessing the affected product physically, an attacker may retrieve the internal data.

Recommendations For all firmware versions of the thermal camera TMC series, consider implementing additional security measures to protect internally saved data, such as restricting physical access to the device or implementing encryption for stored data. At the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Related Identifiers

CVE-2024-22028

Affected Products

Tmc Series

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2024-22028 · Security Note
• https://jvn.jp/en/jp/JVN96240417 · Note
• https://twitter.com/VulmonFeeds/status/1746860362861867116 · Twitter Post
• https://twitter.com/CVEnew/status/1746793207650713725 · Twitter Post
• https://t.me/cvenotify/67451 · Telegram Post
• https://t.me/cvenotify/68251 · Telegram Post
• https://3rrr-btob.jp/archives/news/23624 · Note