Skip to content
CVE PROGRAM SOURCE RECORD7.2 High

CVE-2023-36609

CVE-2023-36609

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

The affected TBox RTUs run OpenVPN with root privileges and can run user defined configuration scripts. An attacker could set up a local OpenVPN server and push a malicious script onto the TBox host to acquire root privileges.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Ovarro TBox MS-CPU32

Default version status: unaffected

  • 0 to ≤ 1.50.598affected

Ovarro ​TBox MS-CPU32-S2

Default version status: unaffected

  • 0 to ≤ 1.50.598affected

Ovarro TBox LT2

Default version status: unaffected

  • 0 to ≤ 1.50.598affected

Ovarro TBox TG2

Default version status: unaffected

  • 0 to ≤ 1.50.598affected

Ovarro TBox RM2

Default version status: unaffected

  • 0 to ≤ 1.50.598affected

References