Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2023-36607

CVE-2023-36607

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

The affected TBox RTUs are missing authorization for running some API commands. An attacker running these commands could reveal sensitive information such as software versions and web server file contents.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Ovarro TBox RM2

Default version status: unaffected

  • 0 to ≤ 1.50.598affected

Ovarro TBox TG2

Default version status: unaffected

  • 0 to ≤ 1.50.598affected

Ovarro TBox LT2

Default version status: unaffected

  • 0 to ≤ 1.50.598affected

Ovarro TBox MS-CPU32-S2

Default version status: unaffected

  • 0 to ≤ 1.50.598affected

Ovarro TBox MS-CPU32

Default version status: unaffected

  • 0 to ≤ 1.50.598affected

References