Ovarro vulnerabilities

CVEs per yearBy the year they were published

1. 20226
2. 20236

Newest CVEs

• CVE-2023-3395

  ​All versions of the TWinSoft Configuration Tool store encrypted passwords as plaintext in memory. An attacker with access to system files could open a file to…

  Ovarro · TBox MS-CPU32

  Medium6.5
• CVE-2023-36611

  The affected TBox RTUs allow low privilege users to access software security tokens of higher privilege. This could allow an attacker with “user” privileges to…

  Ovarro · TBox MS-CPU32

  Medium6.5
• CVE-2023-36610

  ​The affected TBox RTUs generate software security tokens using insufficient entropy. The random seed used to generate the software tokens is not initialized…

  Ovarro · TBox MS-CPU32

  Medium5.9
• CVE-2023-36609

  The affected TBox RTUs run OpenVPN with root privileges and can run user defined configuration scripts. An attacker could set up a local OpenVPN server and…

  Ovarro · TBox MS-CPU32

  High7.2
• CVE-2023-36608

  The affected TBox RTUs store hashed passwords using MD5 encryption, which is an insecure encryption algorithm.

  Ovarro · TBox MS-CPU32

  Medium6.5
• CVE-2023-36607

  CVE-2023-36607

  Ovarro · TBox RM2

  Medium5.3
• CVE-2021-22646

  Ovarro TBox Code Injection

  Ovarro · TBox

  High8.8
• CVE-2021-22644

  Ovarro TBox Use of Hard-coded Cryptographic Key

  Ovarro · TBox

  High7.5
• CVE-2021-22648

  Ovarro TBox Incorrect Permission Assignment for Critical Resource

  Ovarro · TBox

  High8.8
• CVE-2021-22650

  Ovarro TBox Relative Path Traversal

  Ovarro · TBox

  High7.5