1. Home
  2. CVE Database
  3. CVE-2024-41153
HIGH · 7.2

CVE-2024-41153

Command injection vulnerability in the Edge Computing UI for the TRO600 series radios that allows for the execution of arbitrary system commands. If exploited, an attacker with write access to the web...

Vulnerability Description

Command injection vulnerability in the Edge Computing UI for the TRO600 series radios that allows for the execution of arbitrary system commands. If exploited, an attacker with write access to the web UI can execute commands on the device with root privileges, far more extensive than what the write privilege intends.

CVSS Score

7.2

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
HitachienergyTro610 Firmware>= 9.1.0.0, < 9.2.0.5
HitachienergyTro610-
HitachienergyTro620 Firmware>= 9.1.0.0, < 9.2.0.5
HitachienergyTro620-
HitachienergyTro670 Firmware>= 9.1.0.0, < 9.2.0.5
HitachienergyTro670-

Related Weaknesses (CWE)

CWE-78CWE-77

References

FAQ

What is CVE-2024-41153?

CVE-2024-41153 is a vulnerability with a CVSS score of 7.2 (HIGH). Command injection vulnerability in the Edge Computing UI for the TRO600 series radios that allows for the execution of arbitrary system commands. If exploited, an attacker with write access to the web...

How severe is CVE-2024-41153?

CVE-2024-41153 has been rated HIGH with a CVSS base score of 7.2/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2024-41153?

Check the references section above for vendor advisories and patch information. Affected products include: Hitachienergy Tro610 Firmware, Hitachienergy Tro610, Hitachienergy Tro620 Firmware, Hitachienergy Tro620, Hitachienergy Tro670 Firmware.