TI-2023-03175 CVE-2023-3395 · GHSA-mj3g-5jvr-4w7h
Cleartext storage of sensitive information in Ovarro TBox MS-CPU32
Priority LOW 29
All versions of the TWinSoft Configuration Tool store encrypted passwords as plaintext in memory.
Vulnerabilities
6 records
TI-2023-18435 CVE-2023-36611 · GHSA-4h6x-9m53-wfc7
Improper authorization in Ovarro TBox MS-CPU32
Priority LOW 29
The affected TBox RTUs allow low privilege users to access software security tokens of higher privilege.
TI-2023-18434 CVE-2023-36610 · GHSA-mp27-67w3-v3v9
The affected TBox RTUs generate software security tokens using insufficient entropy.
Priority LOW 27
The affected TBox RTUs generate software security tokens using insufficient entropy.
TI-2023-18433 CVE-2023-36609 · GHSA-7cxv-6x8v-9gmq
The affected TBox RTUs run OpenVPN with root privileges and can run user defined…
Priority LOW 35
The affected TBox RTUs run OpenVPN with root privileges and can run user defined configuration scripts.
TI-2023-18432 CVE-2023-36608 · GHSA-c8rm-qrp7-66mr
The affected TBox RTUs store hashed passwords using MD5 encryption, which is an insecure encryption algorithm.
Priority LOW 28
The affected TBox RTUs store hashed passwords using MD5 encryption, which is an insecure encryption algorithm.
TI-2023-18431 CVE-2023-36607 · GHSA-ph32-jw9m-pm23
Missing authorization in Ovarro TBox RM2
Priority LOW 31
The affected TBox RTUs are missing authorization for running some API commands.