Insecure Default Initialization of Resource in Trio Q Licensed Data Radio - CVE-2025-2442
Published: April 22, 2025
Vulnerability identifier: #VU107654
CSH Severity: Low
CVSS v4: 5.4 [CVSS:4.0/AV:P/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2025-2442
CWE-ID: CWE-1188
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local attacker to compromise the target system.
The vulnerability exists due to insecure default initialization of resource. An attacker with physical access can set the radio to factory default mode and execute arbitrary code on the system.
Affected software
Trio Q Licensed Data Radio
How to mitigate CVE-2025-2442
Install updates from vendor's website.
Trio Q Licensed Data Radio - update to 2.7.2