CVE-2024-31202: Proges Thermoscan IP

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

A “CWE-732: Incorrect Permission Assignment for Critical Resource” in the ThermoscanIP installation folder allows a local attacker to perform a Local Privilege Escalation.

Affected products

  • Proges Thermoscan IP: version 20211103 only

Published 2024-07-31. Last modified 2026-06-17.