What is CVE-2024-41156?

CVE-2024-41156 is a low-severity vulnerability in Hitachi Energy Tro600, classified under Improper Removal of Sensitive Information Before Storage or Transfer. CVSS score: 2.7/10. Published 2024-10-29.

How severe is CVE-2024-41156?

Low severity. CVSS v3 base score is 2.7 out of 10.

Vulnerability in Hitachi Energy Tro600

CVE-2024-41156

Profile files from TRO600 series radios are extracted in plain-text and encrypted file formats. Profile files provide potential attackers valuable configuration information about the Tropos network. Profiles can only be exported by authenticated users with higher privilege of write access.

EPSS: 0.004 (29.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 2.7 (Low). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N.

Affected products

Weakness classification (CWE)

CWE-212 — Improper Removal of Sensitive Information Before Storage or Transfer

References

cybersecurity@hitachienergy.com (vendor-advisory, Vendor Advisory)

Frequently asked questions

What is CVE-2024-41156?: CVE-2024-41156 is a low-severity vulnerability in Hitachi Energy Tro600, classified under Improper Removal of Sensitive Information Before Storage or Transfer. CVSS score: 2.7/10. Published 2024-10-29.
How severe is CVE-2024-41156?: Low severity. CVSS v3 base score is 2.7 out of 10.