Vulnerability · Published Jan 15, 2024 · Assigned by jpcert
CVE-2024-22028
Medium 4.6
In plain English
A medium-severity security flaw in 3R-TMC01 from THREE R SOLUTION CORP. JAPAN. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 15% of all known vulnerabilities).
Severity (CVSS 3.1)4.6Medium
Exploit odds (30 days)0.2%top 85.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Insufficient technical documentation issue exists in thermal camera TMC series all firmware versions. The user of the affected product is not aware of the internally saved data. By accessing the affected product physically, an attacker may retrieve the internal data.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| THREE R SOLUTION CORP. JAPAN | 3R-TMC01 | all firmware versions |
| THREE R SOLUTION CORP. JAPAN | 3R-TMC02 | all firmware versions |
| THREE R SOLUTION CORP. JAPAN | 3R-TMC03 | all firmware versions |
| THREE R SOLUTION CORP. JAPAN | 3R-TMC04 | all firmware versions |
| THREE R SOLUTION CORP. JAPAN | 3R-TMC05 | all firmware versions |
| THREE R SOLUTION CORP. JAPAN | 3R-TMC06 | all firmware versions |