Description
CWE-1188: Initialization of a Resource with an Insecure Default vulnerability exists that could lead to loss of
confidentiality when a malicious user, having physical access, sets the radio in factory default mode where the
product does not correctly initialize all data.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Schneider Electric | Trio Q Licensed Data Radio | Versions prior to v2.7.2 | — |
Advisories 2
- ICSA-25-107-01 Schneider Electric Trio Q Licensed Data Radio CISA ICS & IT advisories · Apr 8, 2025
- SEVD-2025-098-02 Trio™ Q Licensed Data Radios Schneider Electric CPCERT · Apr 8, 2025