CVE-2024-41153: Command Injection
First published: Tue Oct 29 2024(Updated: )
Command injection vulnerability in the Edge Computing UI for the TRO600 series radios that allows for the execution of arbitrary system commands. If exploited, an attacker with write access to the web UI can execute commands on the device with root privileges, far more extensive than what the write privilege intends.
Credit: cybersecurity@hitachienergy.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| Hitachienergy Tro610 Firmware | >=9.1.0.0<9.2.0.5 | |
| Hitachienergy Tro610 | ||
| All of | ||
| Hitachienergy Tro620 Firmware | >=9.1.0.0<9.2.0.5 | |
| Hitachienergy Tro620 | ||
| All of | ||
| Hitachienergy Tro670 Firmware | >=9.1.0.0<9.2.0.5 | |
| Hitachienergy Tro670 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/references
- agent/description
- agent/type
- agent/first-publish-date
- agent/author
- agent/severity
- agent/event
- agent/last-modified-date
- agent/softwarecombine
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/hitachienergy
- canonical/hitachienergy tro610 firmware
- version/hitachienergy tro610 firmware/9.1.0.0
- canonical/hitachienergy tro610
- canonical/hitachienergy tro620 firmware
- version/hitachienergy tro620 firmware/9.1.0.0
- canonical/hitachienergy tro620
- canonical/hitachienergy tro670 firmware
- version/hitachienergy tro670 firmware/9.1.0.0
- canonical/hitachienergy tro670