CVE-2024-22028: Insufficient technical documentation issue exists in thermal camera TMC series all firmware versions. The user of the affected product is not aware...
4.6
CVSS
Description
Insufficient technical documentation issue exists in thermal camera TMC series all firmware versions. The user of the affected product is not aware of the internally saved data. By accessing the affected product physically, an attacker may retrieve the internal data.
Classification
CVE ID: CVE-2024-22028
CVSS Base Severity: MEDIUM
CVSS Base Score: 4.6
CVSS Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Problem Types
Insufficient verification of data authenticityAffected Products
Vendor: THREE R SOLUTION CORP. JAPAN
Product: 3R-TMC01, 3R-TMC02, 3R-TMC03, 3R-TMC04, 3R-TMC05, 3R-TMC06
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.04% (probability of being exploited)
EPSS Percentile: 13.1% (scored less or equal to compared to others)
EPSS Date: 2025-06-07 (when was this score calculated)
Stakeholder-Specific Vulnerability Categorization (SSVC)
SSVC Exploitation: none
SSVC Technical Impact: partial
SSVC Automatable: false
References
https://nvd.nist.gov/vuln/detail/CVE-2024-22028https://3rrr-btob.jp/archives/news/23624
https://jvn.jp/en/jp/JVN96240417/