PT-2024-23845 · Unknown · Thermoscanip Scrutation

Diego Zaffaroni · Published 2024-07-31 · Updated 2024-08-12 · CVE-2024-31201

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ThermoscanIP Scrutation (affected versions not specified)

Description A misconfiguration known as "CWE-428: Unquoted Search Path or Element" affects the ThermoscanIP Scrutation service. This issue could be exploited in scenarios where incorrect permissions were assigned to the C: path, potentially allowing a privilege escalation on the local machine.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-428

Related Identifiers

CVE-2024-31201

Affected Products

Thermoscanip Scrutation

References · 7

• https://osv.dev/vulnerability/CVE-2024-31201 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-31201 · Security Note
• https://t.me/cvenotify/88193 · Telegram Post
• https://t.me/cvenotify/88069 · Telegram Post
• https://t.me/cvedetector/2143 · Telegram Post
• https://t.me/cvenotify/90147 · Telegram Post
• https://nozominetworks.com/labs/vulnerability-advisories-cve-2024-31201 · Note