CVE-2024-41156CWE-212
Profile files from TRO600 series radios are extracted in plain-text
and encrypted file formats
Low · published October 29, 2024
What it is
Profile files from TRO600 series radios are extracted in plain-text
and encrypted file formats. Profile files provide potential attackers
valuable configuration information about the Tropos network. Profiles
can only be exported by authenticated users with higher privilege of write access.
The record
Technical detail
- CVSS v3.1
- 2.7 · LOW
- Vector
- CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.00374 · 30.1th percentile
- Weakness
- CWE-212 · Improper Removal of Sensitive Information Before Storage or Transfer
- Published
- 2024-10-29T12:44Z
EPSS history
Timeline