Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2023-3395

CVE-2023-3395

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

​All versions of the TWinSoft Configuration Tool store encrypted passwords as plaintext in memory. An attacker with access to system files could open a file to load the document into memory, including sensitive information associated with document, such as password. The attacker could then obtain the plaintext password by using a memory viewer.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Ovarro TBox MS-CPU32

Default version status: unaffected

  • 0 to ≤ 1.50.598affected

Ovarro ​TBox MS-CPU32-S2

Default version status: unaffected

  • 0 to ≤ 1.50.598affected

Ovarro TBox LT2

Default version status: unaffected

  • 0 to ≤ 1.50.598affected

Ovarro TBox TG2

Default version status: unaffected

  • 0 to ≤ 1.50.598affected

Ovarro TBox RM2

Default version status: unaffected

  • 0 to ≤ 1.50.598affected

References