Vulnerabilities (CVE)

Filtered by vendor Proges Subscribe
Filtered by product Thermoscan Ip
Total 3 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-31203 1 Proges 1 Thermoscan Ip 2024-09-30 N/A 5.5 MEDIUM
A “CWE-121: Stack-based Buffer Overflow” in the wd210std.dll dynamic library packaged with the ThermoscanIP installer allows a local attacker to possibly trigger a Denial-of-Service (DoS) condition on the target component.
CVE-2024-31202 1 Proges 1 Thermoscan Ip 2024-09-30 N/A 7.8 HIGH
A “CWE-732: Incorrect Permission Assignment for Critical Resource” in the ThermoscanIP installation folder allows a local attacker to perform a Local Privilege Escalation.
CVE-2024-31201 1 Proges 1 Thermoscan Ip 2024-08-12 N/A 6.7 MEDIUM
A “CWE-428: Unquoted Search Path or Element” affects the ThermoscanIP_Scrutation service. Such misconfiguration could be abused in scenarios where incorrect permissions were assigned to the C:\ path to attempt a privilege escalation on the local machine.