CVE-2024-31201
MEDIUMDescription
A “CWE-428: Unquoted Search Path or Element” affects the ThermoscanIP_Scrutation service. Such misconfiguration could be abused in scenarios where incorrect permissions were assigned to the C:\ path to attempt a privilege escalation on the local machine.
Is your site exposed to CVE-2024-31201?
Run a free security scan — no signup, results in seconds.
CVSS v3.1 Score
Weakness Type (CWE)
Affected Products
| Vendor | Product |
|---|---|
| proges | thermoscan_ip |
References
Frequently Asked Questions
What is CVE-2024-31201? +
How severe is CVE-2024-31201? +
What products are affected by CVE-2024-31201? +
How do I check if I'm vulnerable to CVE-2024-31201? +
Related Vulnerabilities
Flexsense DiskBoss 11.7.28 allows unauthenticated attackers to elevate their privileges using any of its services, enabling remote code execution during …
The HP Fan Control App might allow local escalation of privileges. An updated version of HP Fan Control App has …
A code execution security issue exists within Studio 5000 Logix Designer® due to an unquoted search path in the External …
The Windows service configuration of ABP and AES contains an unquoted ImagePath registry value vulnerability. This allows a local attacker …
An unquoted executable path exists in the Rockwell Automation FactoryTalk® Remote Access™ possibly resulting in remote code execution if exploited. …
The CMService.exe service runs with SYSTEM privileges and contains an unquoted service path. This allows a local attacker with write …