Insecure Default Initialization of Resource in Trio Q Licensed Data Radio - CVE-2025-2441
Published: April 22, 2025
Vulnerability identifier: #VU107645
CSH Severity: Low
CVSS v4: 4.1 [CVSS:4.0/AV:P/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2025-2441
CWE-ID: CWE-1188
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local attacker to compromise the target system.
The vulnerability exists due to insecure default initialization of resource. An attacker with physical access can set the radio to factory default mode and cause the target product to not correctly initialize all data.
Affected software
Trio Q Licensed Data Radio
How to mitigate CVE-2025-2441
Install updates from vendor's website.
Trio Q Licensed Data Radio - update to 2.7.2