Skip to content
OpenAdvisories
Medium · 4.2 CVE-2025-2440 EUVD-2025-10433GHSA-vv3m-5756-qf6f

CWE-922: Insecure Storage of Sensitive Information vulnerability exists that could potentially lead to unauthorized access of confidential …

Published Apr 9, 2025 · Updated Apr 9, 2025 · Assigned by schneider

Vendor: Schneider Electric Product: Trio Q Licensed Data Radio Category: ICS / OT

Description

CWE-922: Insecure Storage of Sensitive Information vulnerability exists that could potentially lead to unauthorized
access of confidential data when a malicious user, having physical access and advanced information on the file
system, sets the radio in factory default mode.

Affected products

VendorProductAffectedFixed
Schneider Electric Trio Q Licensed Data Radio Versions prior to v2.7.2 —

Advisories 2

References