Back to Database
Status published
Medium
CVE-2024-31201
A “CWE-428: Unquoted Search Path or Element” affects the ThermoscanIP_Scrutation...
Vulnerability Description
A “CWE-428: Unquoted Search Path or Element” affects the ThermoscanIP_Scrutation service. Such misconfiguration could be abused in scenarios where incorrect permissions were assigned to the C:\ path to attempt a privilege escalation on the local machine.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-31201
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Diego Zaffaroni of Nozomi Networks found this bug during a security research activity.
More from Plug&Track
View All →CVE-2024-3083
A “CWE-352: Cross-Site Request Forgery (CSRF)” can be exploited by...
High
8.3
CVE-2024-3082
A “CWE-256: Plaintext Storage of a Password” affecting the administrative...
Medium
4.2
CVE-2024-31203
A “CWE-121: Stack-based Buffer Overflow” in the wd210std.dll dynamic library...
Low
3.3
CVE-2024-31202
A “CWE-732: Incorrect Permission Assignment for Critical Resource” in the...
High
7.8
CVE-2024-31200
A “CWE-201: Insertion of Sensitive Information Into Sent Data” affecting...
Medium
4.2
Affected Vendor
Plug&Track
View all reports →Affected Software
Thermoscan IP
Vulnerable Versions:
20211103
Timeline
Official Publish:
July 31st, 2024
Last Modified:
August 1st, 2024
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H