Vulnerability · Published Oct 29, 2024 · Assigned by Hitachi Energy
CVE-2024-41156
Low 2.7
In plain English
A low-severity security flaw in TRO600 from Hitachi Energy. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 31% of all known vulnerabilities).
Severity (CVSS 3.1)2.7Low
Exploit odds (30 days)0.4%top 68.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Profile files from TRO600 series radios are extracted in plain-text and encrypted file formats. Profile files provide potential attackers valuable configuration information about the Tropos network. Profiles can only be exported by authenticated users with higher privilege of write access.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Hitachi Energy | TRO600 | 9.0.1.0 – through 9.2.0.0 |
Weakness: CWE-212 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N