Records12All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical5CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
Ovarro records in CISA KEVNo Ovarro vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority LOW 35
The affected TBox RTUs run OpenVPN with root privileges and can run user defined configuration scripts.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00698 · Published 2023-07-03 · No fix listed CWE-829
Priority LOW 31
The affected TBox RTUs are missing authorization for running some API commands.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00492 · Published 2023-06-29 · No fix listed CWE-862
Priority LOW 29
The affected TBox RTUs allow low privilege users to access software security tokens of higher privilege.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00509 · Published 2023-07-03 · No fix listed CWE-285
Priority LOW 29
All versions of the TWinSoft Configuration Tool store encrypted passwords as plaintext in memory.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00321 · Published 2023-07-03 · No fix listed CWE-256
Priority LOW 28
The affected TBox RTUs store hashed passwords using MD5 encryption, which is an insecure encryption algorithm.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.0023 · Published 2023-07-03 · No fix listed CWE-327
Priority LOW 27
The affected TBox RTUs generate software security tokens using insufficient entropy.
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.00511 · Published 2023-07-03 · No fix listed CWE-331
THREATIST.IORead the docs