Schneider Electric Trio Q Licensed Data Radio vulnerabilities

3 CVEs affecting Schneider Electric Trio Q Licensed Data Radio, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-2442, published 2025-04-09.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-2442, published 2025-04-09. Medium severity, CVSS 6.8. EPSS: 0.2% chance of exploitation in the next 30 days. CWE-1188: Initialization of a Resource with an Insecure Default vulnerability exists that could potentially lead to unauthorized access which could result in the loss of confidentially, integrity and…
CVE-2025-2441, published 2025-04-09. Medium severity, CVSS 4.6. EPSS: 0.2% chance of exploitation in the next 30 days. CWE-1188: Initialization of a Resource with an Insecure Default vulnerability exists that could lead to loss of confidentiality when a malicious user, having physical access, sets the radio in…
CVE-2025-2440, published 2025-04-09. Medium severity, CVSS 4.2. EPSS: 0.2% chance of exploitation in the next 30 days. CWE-922: Insecure Storage of Sensitive Information vulnerability exists that could potentially lead to unauthorized access of confidential data when a malicious user, having physical access and…