VulnerabilityAnalyzed
CVE-2024-41156
Profile files provide potential attackers valuable configuration information about the Tropos network.
LOW 2.7EPSS 0.37%
Does this matter?
Lower severity and a low EPSS score (0.37%). Track it; it rarely justifies an emergency change on its own.
Description
Profile files from TRO600 series radios are extracted in plain-text and encrypted file formats. Profile files provide potential attackers valuable configuration information about the Tropos network. Profiles can only be exported by authenticated users with higher privilege of write access.
- CVSS 3.1
- 2.7 LOWCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
- EPSS
- 0.37% probability · 31th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-212
- Affected
- hitachienergy/tro610 firmware · hitachienergy/tro620 firmware · hitachienergy/tro670 firmware
- Source
- cybersecurity@hitachienergy.com
References
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.