JVN#96240417: Thermal camera TMC series vulnerable to insufficient technical documentation

Thermal camera TMC series provided by THREE R SOLUTION CORP. JAPAN are vulnerable to insufficient technical documentation (CWE-1059).
The related documentation does not describe the existence of the network interface, nor the internal storage for pictures and measurement data.

Impact

The user of the affected product is not aware of the internally saved data.
By accessing the affected product physically, an attacker may retrieve the internal data.

Solution

Apply the workaround
Apply the workaround according to the information provided by the developer.

For more information, refer to the information provided by the developer.

Products Affected

All firmware versions of the following thermal cameras are affected by this vulnerability.

• 3R-TMC01
• 3R-TMC02
• 3R-TMC03
• 3R-TMC04
• 3R-TMC05
• 3R-TMC06