CVE-2024-41156
First published: Tue Oct 29 2024(Updated: )
Profile files from TRO600 series radios are extracted in plain-text and encrypted file formats. Profile files provide potential attackers valuable configuration information about the Tropos network. Profiles can only be exported by authenticated users with higher privilege of write access.
Credit: cybersecurity@hitachienergy.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| Hitachi Energy Tro610 | >=9.1.0.0<9.2.0.5 | |
| Hitachi Energy Tro610 | ||
| All of | ||
| Hitachienergy Tro620 Firmware | >=9.1.0.0<9.2.0.5 | |
| Hitachienergy Tro620 Firmware | ||
| All of | ||
| Hitachi Energy Tro670 | >=9.1.0.0<9.2.0.5 | |
| Hitachi Energy Tro670 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-41156?
CVE-2024-41156 is classified as a medium severity vulnerability due to potential exposure of sensitive configuration information.
How does CVE-2024-41156 affect Tropos networks?
CVE-2024-41156 allows authenticated users with write access to export profile files that may contain valuable configuration information, which could be exploited by attackers.
How do I fix CVE-2024-41156?
To mitigate CVE-2024-41156, ensure that only trusted authenticated users have write access to profile files and regularly update the firmware to the latest version.
What versions are affected by CVE-2024-41156?
CVE-2024-41156 affects Hitachienergy Tro610, Tro620, and Tro670 firmware versions between 9.1.0.0 and 9.2.0.5.
What are the potential risks associated with CVE-2024-41156?
The risks associated with CVE-2024-41156 include unauthorized access to network configurations and potential network compromise due to leaked sensitive information.
- agent/weakness
- agent/references
- agent/type
- agent/first-publish-date
- agent/author
- agent/severity
- agent/softwarecombine
- agent/description
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/source
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/hitachienergy
- canonical/hitachi energy tro610
- version/hitachi energy tro610/9.1.0.0
- canonical/hitachienergy tro620 firmware
- version/hitachienergy tro620 firmware/9.1.0.0
- canonical/hitachi energy tro670
- version/hitachi energy tro670/9.1.0.0