Summary
Schneider Electric is aware of a vulnerability in its Trio™ Q Licensed Data Radio product.
The Trio Q Licensed Data Radios product is an advanced, high-speed licensed digital data radios, providing both
Ethernet and serial communications for complex and demanding applications in Point-to-Point Multipoint (Multiple
Address Radio) Telemetry and remote SCADA Systems.
Failure to apply the remediations or mitigations provided below may risk disclosure of information that could result
in unauthorized access, loss of confidentiality, integrity, and availability of the product.
Vulnerabilities 3
-
Medium 6.8
CWE-1188: Initialization of a Resource with an Insecure Default vulnerability exists that could potentially lead to una…
-
Medium 4.6
CWE-1188: Initialization of a Resource with an Insecure Default vulnerability exists that could lead to loss of confide…
-
Medium 4.2
CWE-922: Insecure Storage of Sensitive Information vulnerability exists that could potentially lead to unauthorized acc…
Revision history
-
#1.0.0
Original Release
References
-
Trio™ Q Licensed Data Radios - SEVD-2025-098-02 PDF Version
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2025-098-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=sevd-2025-098-02.pdf
-
Recommended Cybersecurity Best Practices
https://www.se.com/us/en/download/document/7EN52-0390
-
ICS Advisory ICSA-25-107-01 - Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-25-107-01
-
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
-
Recommended Practices
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
-
Recommended Practices
https://www.cisa.gov/topics/industrial-control-systems
-
Recommended Practices
https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
-
Recommended Practices
https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B