Description
CWE-1188: Initialization of a Resource with an Insecure Default vulnerability exists that could potentially lead to unauthorized access which could result in the loss of confidentially, integrity and availability when a malicious user, having physical access, sets the radio to the factory default mode.
Scores
CVSS v3
6.8
EPSS
0.0018
EPSS Percentile
38.8%
Attack Vector
PHYSICAL
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
total
Details
CWE
CWE-1188
Status
published
Products (1)
Schneider Electric/Trio Q Licensed Data Radio
Versions prior to v2.7.2
Published
Apr 09, 2025
Tracked Since
Feb 18, 2026