Advisories · Technology
Ovarro TBox LT2.
Every CVE that names Ovarro TBox LT2 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.5 Medium
Plaintext password storage in Ovarro TBox MS-CPU32 and others
- Ovarro TBox MS-CPU32
- Ovarro TBox MS-CPU32-S2
- CWE-256
- CVSS 6.5 Medium
Improper authorization in Ovarro TBox MS-CPU32 and others
- Ovarro TBox MS-CPU32
- Ovarro TBox MS-CPU32-S2
- Broken access control
- CVSS 5.9 Medium
The affected TBox RTUs generate software security tokens using insufficient entropy.
- Ovarro TBox MS-CPU32
- Ovarro TBox MS-CPU32-S2
- CWE-331
- CVSS 7.2 High
The affected TBox RTUs run OpenVPN with root privileges and can run user defined configuration scripts.
- Ovarro TBox MS-CPU32
- Ovarro TBox MS-CPU32-S2
- CWE-829
- CVSS 6.5 Medium
Broken or risky cryptographic algorithm in Ovarro TBox MS-CPU32 and others
- Ovarro TBox MS-CPU32
- Ovarro TBox MS-CPU32-S2
- Weak cryptography or TLS
-
CVE-2023-36607
- Ovarro TBox RM2
- Ovarro TBox TG2
- Broken access control