Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2023-36611

CVE-2023-36611

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

The affected TBox RTUs allow low privilege users to access software security tokens of higher privilege. This could allow an attacker with “user” privileges to access files requiring higher privileges by establishing an SSH session and providing the other tokens.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Ovarro TBox MS-CPU32

Default version status: unaffected

  • 0 to ≤ 1.50.598affected

Ovarro ​TBox MS-CPU32-S2

Default version status: unaffected

  • 0 to ≤ 1.50.598affected

Ovarro TBox LT2

Default version status: unaffected

  • 0 to ≤ 1.50.598affected

Ovarro TBox TG2

Default version status: unaffected

  • 0 to ≤ 1.50.598affected

Ovarro TBox RM2

Default version status: unaffected

  • 0 to ≤ 1.50.598affected

References