{"id":"CVE-2023-36611","state":"PUBLISHED","title":"CVE-2023-36611","description":"\nThe affected TBox RTUs allow low privilege users to access software security tokens of higher privilege. This could allow an attacker with “user” privileges to access files requiring higher privileges by establishing an SSH session and providing the other tokens.\n\n","publishedAt":"2023-07-03T20:03:07.721Z","updatedAt":"2024-10-25T13:08:42.739Z","severity":{"score":6.5,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","source":"icscert"},"assigner":"icscert","products":["Ovarro TBox MS-CPU32","Ovarro ​TBox MS-CPU32-S2","Ovarro TBox LT2","Ovarro TBox TG2","Ovarro TBox RM2"],"affected":[{"vendor":"Ovarro","product":"TBox MS-CPU32","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"1.50.598","versionType":"custom"}]},{"vendor":"Ovarro","product":"​TBox MS-CPU32-S2","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"1.50.598","versionType":"custom"}]},{"vendor":"Ovarro","product":"TBox LT2","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"1.50.598","versionType":"custom"}]},{"vendor":"Ovarro","product":"TBox TG2","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"1.50.598","versionType":"custom"}]},{"vendor":"Ovarro","product":"TBox RM2","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"1.50.598","versionType":"custom"}]}],"references":["https://www.cisa.gov/news-events/ics-advisories/icsa-23-180-03"],"weaknesses":["CWE-285"],"ingestedAt":"2026-10-29T20:06:08.715Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2023/36xxx/CVE-2023-36611.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2023-36611","state":"PUBLISHED","datePublished":"2023-07-03T20:03:07.721Z","dateUpdated":"2024-10-25T13:08:42.739Z","assignerShortName":"icscert","assignerOrgId":"7d14cffa-0d7d-4270-9dc0-52cabd5a23a6","dateReserved":"2023-06-23T20:39:08.361Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"\nThe affected TBox RTUs allow low privilege users to access software security tokens of higher privilege. This could allow an attacker with “user” privileges to access files requiring higher privileges by establishing an SSH session and providing the other tokens.\n\n"}],"affected":[{"vendor":"Ovarro","product":"TBox MS-CPU32","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"1.50.598","versionType":"custom"}]},{"vendor":"Ovarro","product":"​TBox MS-CPU32-S2","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"1.50.598","versionType":"custom"}]},{"vendor":"Ovarro","product":"TBox LT2","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"1.50.598","versionType":"custom"}]},{"vendor":"Ovarro","product":"TBox TG2","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"1.50.598","versionType":"custom"}]},{"vendor":"Ovarro","product":"TBox RM2","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"1.50.598","versionType":"custom"}]}],"references":[{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-23-180-03","tags":["government-resource"]}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":6.5,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-285","description":"CWE-285 Improper Authorization","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"icscert","orgId":"7d14cffa-0d7d-4270-9dc0-52cabd5a23a6","dateUpdated":"2023-07-03T20:03:07.721Z"},"credits":[{"lang":"en","type":"finder","user":"00000000-0000-4000-9000-000000000000","value":"Floris Hendriks"},{"lang":"en","type":"finder","user":"00000000-0000-4000-9000-000000000000","value":"Jeroen Wijenbergh"},{"lang":"en","type":"reporter","user":"00000000-0000-4000-9000-000000000000","value":"Radboud University"}],"datePublic":"2023-06-29T18:00:00.000Z","source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.1.0-dev"}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-23-180-03","tags":["government-resource","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-02T16:52:54.051Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-10-25T13:04:51.270877Z","id":"CVE-2023-36611","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-10-25T13:08:42.739Z"}}]}}}