CVE-2024-41153 HIGH

CVE-2024-41153

Vendor Hitachi Energy
Product TRO600
Weakness CWE-78
Published October 29, 2024
Last update November 4, 2025

CVSS base score

7.2/10
Attack vector Network
Attack complexity Low
Privileges required High
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

Command injection vulnerability in the Edge Computing UI for the TRO600 series radios that allows for the execution of arbitrary system commands. If exploited, an attacker with write access to the web UI can execute commands on the device with root privileges, far more extensive than what the write privilege intends.

Key dates

02Disclosure timeline

October 29, 2024 CVE published
November 4, 2025 Record updated