CVE-2024-31202

Description

A “CWE-732: Incorrect Permission Assignment for Critical Resource” in the ThermoscanIP installation folder allows a local attacker to perform a Local Privilege Escalation.

References

https://www.hipaajournal.com/vulnerabilities-sensor-net-connect-thermoscan-ip-temperature-control-devices-software/

https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2024-31202

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3