CVE-2024-41153: OS Command Injection
Command injection vulnerability in the Edge Computing UI for the TRO600 series radios that allows for the execution of arbitrary system commands. If exploited, an attacker with write access to the web UI can execute commands on the device with root privileges, far more extensive than what the write privilege intends.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-41153?
CVE-2024-41153 is considered a high-severity vulnerability due to the potential for unauthorized command execution with root privileges.
How do I fix CVE-2024-41153?
To remediate CVE-2024-41153, update the firmware of the affected Hitachi Energy TRO600 series radios to a version higher than 9.2.0.5.
What products are affected by CVE-2024-41153?
CVE-2024-41153 affects the Hitachienergy TRO610, TRO620, and TRO670 series radios running specific firmware versions.
Who can exploit CVE-2024-41153?
An attacker with write access to the Edge Computing UI of the affected devices can exploit CVE-2024-41153.
What type of vulnerability is CVE-2024-41153?
CVE-2024-41153 is a command injection vulnerability that allows the execution of arbitrary system commands.