CWE-922: Insecure Storage of Sensitive Information vulnerability exists that could potentially lead to unauthorized access of confidential data when a malicious user, having physical access and advanced information on the file system, sets the radio in factory default mode.

CWE-922: Insecure Storage of Sensitive Information vulnerability exists that could potentially lead to unauthorized access of confidential data when a malicious user, having physical access and advanced information on the file system, sets the radio in factory default mode.

Schneider Electric is aware of a vulnerability in its Trio™ Q Licensed Data Radio product. The Trio Q Licensed Data Radios product is an advanced, high-speed licensed digital data radios, providing both Ethernet and serial communications for complex and demanding applications in Point-to-Point Multipoint (Multiple Address Radio) Telemetry and remote SCADA Systems. Failure to apply the remediations or mitigations provided below may risk disclosure of information that could result in unauthorized access, loss of confidentiality, integrity, and availability of the product.

Schneider Electric is aware of a vulnerability in its Trio™ Q Licensed Data Radio product. The Trio Q Licensed Data Radios product is an advanced, high-speed licensed digital data radios, providing both Ethernet and serial communications for complex and demanding applications in Point-to-Point Multipoint (Multiple Address Radio) Telemetry and remote SCADA Systems. Failure to apply the remediations or mitigations provided below may risk disclosure of information that could result in unauthorized access, loss of confidentiality, integrity, and availability of the product.