What is the CVSS score of CVE-2024-22028?

CVE-2024-22028 has a CVSS 3.1 base score of 4.6 (Medium). CVSS vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N. EPSS exploitation probability: 0.2%.

3R Tmc01 Firmware CVE-2024-22028

MEDIUM

2024-01-15 vultures@jpcert.or.jp

Information Disclosure 3R Tmc01 Firmware 3R Tmc02 Firmware 3R Tmc03 Firmware 3R Tmc04 Firmware 3R Tmc05 Firmware 3R Tmc06 Firmware

4.6

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

4.6 MEDIUM

AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack Vector

Physical

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

CVE Published

Jan 15, 2024 - 07:15 nvd

MEDIUM 4.6

DescriptionNVD

AnalysisAI

Insufficient technical documentation issue exists in thermal camera TMC series all firmware versions. Rated medium severity (CVSS 4.6), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

Insufficient technical documentation issue exists in thermal camera TMC series all firmware versions. The user of the affected product is not aware of the internally saved data. By accessing the affected product physically, an attacker may retrieve the internal data. Affected products include: 3Rrr-Btob 3R-Tmc01 Firmware, 3Rrr-Btob 3R-Tmc02 Firmware, 3Rrr-Btob 3R-Tmc03 Firmware, 3Rrr-Btob 3R-Tmc04 Firmware, 3Rrr-Btob 3R-Tmc05 Firmware.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.