Description
CWE-1188: Initialization of a Resource with an Insecure Default vulnerability exists that could potentially lead to
unauthorized access which could result in the loss of confidentially, integrity and availability when a malicious
user, having physical access, sets the radio to the factory default mode.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Schneider Electric | Trio Q Licensed Data Radio | Versions prior to v2.7.2 | — |
Advisories 2
- ICSA-25-107-01 Schneider Electric Trio Q Licensed Data Radio CISA ICS & IT advisories · Apr 8, 2025
- SEVD-2025-098-02 Trio™ Q Licensed Data Radios Schneider Electric CPCERT · Apr 8, 2025