Skip to content
CVE PROGRAM SOURCE RECORD5.9 Medium

CVE-2023-36610

CVE-2023-36610

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

​The affected TBox RTUs generate software security tokens using insufficient entropy. The random seed used to generate the software tokens is not initialized correctly, and other parts of the token are generated using predictable time-based values. An attacker with this knowledge could successfully brute force the token and authenticate themselves.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Ovarro TBox MS-CPU32

Default version status: unaffected

  • 0 to ≤ 1.50.598affected

Ovarro ​TBox MS-CPU32-S2

Default version status: unaffected

  • 0 to ≤ 1.50.598affected

Ovarro TBox LT2

Default version status: unaffected

  • 0 to ≤ 1.50.598affected

Ovarro TBox TG2

Default version status: unaffected

  • 0 to ≤ 1.50.598affected

Ovarro TBox RM2

Default version status: unaffected

  • 0 to ≤ 1.50.598affected

References