Summary
Schneider Electric is aware of multiple vulnerabilities in its Trio Licensed and License-Free Data
Radio products.
The Trio Licensed Radio products are designed to provide complete, versatile, and high
availability system solutions for long range wireless data communications in SCADA and remote
telemetry applications. The Trio License-Free Radio products are a range of frequency-hopping
Ethernet and Serial Data Radios operating in the license-free 900Mhz and 2.4 Ghz band and
designed with versatility and flexibility in mind.
Failure to apply the remediations and mitigations provided below may risk disclosure of
information, or potential installation of malicious code.
Vulnerabilities 2
-
High 8.2
A CWE-601:URL Redirection to Untrusted Site (‘Open Redirect’) vulnerability exists that could cause disclosure of infor…
-
Medium 6.5
A CWE-494: Download of Code Without Integrity Check vulnerability exists that could allow a privileged user to install …
Revision history
-
#2.0.0
A remediation is now available for Trio J-Series Ethernet Data Radio on CVE-2023-5629
-
#1.0.0
Original Release
References
-
Trio™ Licensed and License-free Data Radios - SEVD-2023-346-01 PDF Version
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-346-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-346-01.pdf
-
Recommended Cybersecurity Best Practices
https://www.se.com/us/en/download/document/7EN52-0390/