CVE-2024-31203

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

A “CWE-121: Stack-based Buffer Overflow” in the wd210std.dll dynamic library packaged with the ThermoscanIP installer allows a local attacker to possibly trigger a Denial-of-Service (DoS) condition on the target component.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-121 CWE-787

Affected software

Vendor	Product	Versions
Plug&Track	Thermoscan IP	20211103

References

https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2024-31203Third Party Advisory

Timeline

Published: Jul 31, 2024
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2024

CVE-2024-312046.1mailcow: dockerized is an open source groupware/email suite based on docker. A security vulnerability has been identified in mailcow affecti CVE-2024-312055.4Saleor is an e-commerce platform. Starting in version 3.10.0 and prior to versions 3.14.64, 3.15.39, 3.16.39, 3.17.35, 3.18.31, and 3.19.19,CVE-2024-312068.2dectalk-tts is a Node package to interact with the aeiou Dectalk web API. In `dectalk-tts@1.0.0`, network requests to the third-party API ar CVE-2024-312075.9Vite (French word for "quick", pronounced /vit/, like "veet") is a frontend build tooling to improve the frontend development experience.`se CVE-2024-312086.5Synapse is an open-source Matrix homeserver. A remote Matrix user with malicious intent, sharing a room with Synapse instances before 1.105.CVE-2024-312095.3oidcc is the OpenID Connect client library for Erlang. Denial of Service (DoS) by Atom exhaustion is possible by calling `oidcc_provider_con CVE-2024-31213.3A remote code execution vulnerability exists in the create_conda_env function of the parisneo/lollms repository, version 5.9.0. The vulnerab CVE-2024-312108.8WordPress is an open publishing platform for the Web. It's possible for a file of a type other than a zip file to be submitted as a new plug CVE-2024-312119.8WordPress is an open publishing platform for the Web. Unserialization of instances of the `WP_HTML_Token` class allows for code execution vi CVE-2024-312127.2InstantCMS is a free and open source content management system. A SQL injection vulnerability affects instantcms v2.16.2 in which an attacke CVE-2024-312135.4InstantCMS is a free and open source content management system. An open redirect was found in the ICMS2 application version 2.16.2 when bein CVE-2024-312149.6Traccar is an open source GPS tracking system. Traccar versions 5.1 through 5.12 allow arbitrary files to be uploaded through the device ima