2.7

CVE-2024-41156

Profile files from TRO600 series radios are extracted in plain-text
and encrypted file formats. Profile files provide potential attackers
valuable configuration information about the Tropos network. Profiles
can only be exported by authenticated users with higher privilege of write access.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Hitachienergy ≫ Tro610 Firmware Version >= 9.1.0.0 < 9.2.0.5
   Hitachienergy ≫ Tro610 Version-
Hitachienergy ≫ Tro620 Firmware Version >= 9.1.0.0 < 9.2.0.5
   Hitachienergy ≫ Tro620 Version-
Hitachienergy ≫ Tro670 Firmware Version >= 9.1.0.0 < 9.2.0.5
   Hitachienergy ≫ Tro670 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.07% 0.224
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 2.7 1.2 1.4
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
cybersecurity@hitachienergy.com 2.7 1.2 1.4
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
CWE-212 Improper Removal of Sensitive Information Before Storage or Transfer

The product stores, transfers, or shares a resource that contains sensitive information, but it does not properly remove that information before the product makes the resource available to unauthorized actors.