CVE-2021-22642

🗓️ 28 Jul 2022 14:17:44Reported by icscertType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 65 Views

An attacker could use specially crafted invalid Modbus frames to crash the Ovarro TBox system

Reporter	Title	Published	Views	Family All 14
Circl	CVE-2021-22642	17 Apr 202515:57	–	circl
CNNVD	Ovarro Tbox 资源管理错误漏洞	23 Mar 202100:00	–	cnnvd
CNVD	Ovarro Tbox Denial of Service Vulnerability	31 Mar 202100:00	–	cnvd
Cvelist	CVE-2021-22642 Ovarro TBox Uncontrolled Resource Consumption	28 Jul 202214:17	–	cvelist
EUVD	EUVD-2021-9778	3 Oct 202520:07	–	euvd
ICS	Ovarro TBox (Update A)	23 Feb 202100:00	–	ics
NVD	CVE-2021-22642	28 Jul 202215:15	–	nvd
OSV	CVE-2021-22642	28 Jul 202215:15	–	osv
Prion	Code injection	28 Jul 202215:15	–	prion
Positive Technologies	PT-2022-9258 · Ovarro · Ovarro Tbox	28 Jul 202200:00	–	ptsecurity

NVD

Vulners

Node

ovarro twinsoftRange<12.4

Node

ovarro tbox_lt2-530_firmwareRange<1.46

AND

ovarro tbox_lt2-530Match-

Node

ovarro tbox_lt2-532_firmwareRange<1.46

AND

ovarro tbox_lt2-532Match-

Node

ovarro tbox_lt2-540_firmwareRange<1.46

AND

ovarro tbox_lt2-540Match-

Node

ovarro tbox_ms-cpu32_firmwareRange<1.46

AND

ovarro tbox_ms-cpu32Match-

Node

ovarro tbox_ms-cpu32-s2_firmwareRange<1.46

AND

ovarro tbox_ms-cpu32-s2Match-

Node

ovarro tbox_rm2_firmwareRange<1.46

AND

ovarro tbox_rm2Match-

Node

ovarro tbox_tg2_firmwareRange<1.46

AND

ovarro tbox_tg2Match-

[
  {
    "product": "TBox",
    "vendor": "Ovarro",
    "versions": [
      {
        "status": "affected",
        "version": "LT2"
      },
      {
        "status": "affected",
        "version": "MS-CPU32"
      },
      {
        "status": "affected",
        "version": "MS-CPU32-S2"
      },
      {
        "status": "affected",
        "version": "RM2"
      },
      {
        "status": "affected",
        "version": "TG2"
      }
    ]
  }
]

Source	Link
cisa	www.cisa.gov/uscert/ics/advisories/icsa-21-054-04

17 Apr 2025 16:15Current

7.6High risk

Vulners AI Score7.6

CVSS 3.17.5

EPSS0.00263

SSVC

CWE-400