CVE-2024-22028

Insufficient technical documentation issue exists in thermal camera TMC series all firmware versions. The user of the affected product is not aware of the internally saved data. By accessing the affected product physically, an attacker may retrieve the internal data.

• https://3rrr-btob.jp/archives/news/23624Product
• https://jvn.jp/en/jp/JVN96240417/Third Party Advisory
• https://3rrr-btob.jp/archives/news/23624Product
• https://jvn.jp/en/jp/JVN96240417/Third Party Advisory

Published

Jan 15, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-22022Vulnerability CVE-2024-22022 allows a Veeam Recovery Orchest…8.8
• CVE-2024-22023An XML entity expansion or XEE vulnerability in SAML compone…5.3
• CVE-2024-22024An XML external entity or XXE vulnerability in the SAML comp…8.3
• CVE-2024-22025A vulnerability in Node.js has been identified, allowing for…6.5
• CVE-2024-22026A local privilege escalation vulnerability in EPMM before 12…6.7
• CVE-2024-22027Improper input validation vulnerability in WordPress Quiz Ma…6.5
• CVE-2024-22029Insecure permissions in the packaging of tomcat allow local …7.8
• CVE-2024-2203The The Plus Addons for Elementor plugin for WordPress is vu…8.8
• CVE-2024-22030A vulnerability has been identified within Rancher that can …8
• CVE-2024-22032A vulnerability has been identified in which an RKE1 cluster…7.1
• CVE-2024-22033The OBS service obs-service-download_url was vulnerable to a…6.3
• CVE-2024-22034Attackers could put the special files in .osc into the actua…5.5