PT-2024-29297 · Unknown · Tro600 Series Radios

Published 2024-10-29 · Updated 2025-10-24 · CVE-2024-41153

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TRO600 series radios (affected versions not specified)

Description A command injection issue in the Edge Computing UI allows an attacker with write access to the web UI to execute arbitrary system commands on the device with root privileges. This level of access is more extensive than what the write privilege intends.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

OS Command Injection

Command Injection

Weakness Enumeration

CWE-78

CWE-77

Related Identifiers

CVE-2024-41153

Affected Products

Tro600 Series Radios

References · 4

• https://osv.dev/vulnerability/CVE-2024-41153 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-41153 · Security Note
• https://publisher.hitachienergy.com/preview?DocumentID=8DBD000147&LanguageCode=en&DocumentPartId=&Action=launch · Vendor Advisory
• https://t.me/cveNotify/140134 · Telegram Post