CVE-2024-41156
Low
Description
Profile files from TRO600 series radios are extracted in plain-text and encrypted file formats. Profile files provide potential attackers valuable configuration information about the Tropos network. Profiles can only be exported by authenticated users with higher privilege of write access.
SeverityLow
CVSS2.7
Exploit probability—
ProductHitachienergy Tro610 Firmware
PublishedOct 29, 2024
First seenOct 29, 2024
Weakness typeCWE-212CWE-212
How to fix
Update
- hitachienergy tro610_firmware9.2.0.5 or later
- hitachienergy tro620_firmware9.2.0.5 or later
- hitachienergy tro670_firmware9.2.0.5 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| hitachienergy tro610_firmware | 9.1.0.0 ≤ v < 9.2.0.5 | 9.2.0.5 |
| hitachienergy tro620_firmware | 9.1.0.0 ≤ v < 9.2.0.5 | 9.2.0.5 |
| hitachienergy tro670_firmware | 9.1.0.0 ≤ v < 9.2.0.5 | 9.2.0.5 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.