CVE-2023-3395

🗓️ 03 Jul 2023 20:04:17Reported by icscertType

All versions of TWinSoft Configuration Tool store encrypted passwords as plaintext in memory. An attacker with access to system files could open a file to load the document into memory, including sensitive information associated with document, such as password

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2023-3395	4 Jul 202300:22	–	circl
CNNVD	Ovarro TBox RTUs 安全漏洞	3 Jul 202300:00	–	cnnvd
Cvelist	CVE-2023-3395	3 Jul 202320:04	–	cvelist
EUVD	EUVD-2023-44062	3 Oct 202520:07	–	euvd
ICS	Ovarro TBox RTUs	29 Jun 202306:00	–	ics
NVD	CVE-2023-3395	3 Jul 202321:15	–	nvd
Prion	Design/Logic Flaw	3 Jul 202321:15	–	prion
Positive Technologies	PT-2023-24592 · Twinsoft · Twinsoft Configuration Tool	3 Jul 202300:00	–	ptsecurity
Vulnrichment	CVE-2023-3395	3 Jul 202320:04	–	vulnrichment

NVD

Vulners

Node

ovarro tbox_ms-cpu32_firmwareMatch-

AND

ovarro tbox_ms-cpu32Match-

Node

ovarro tbox_ms-cpu32-s2_firmwareMatch-

AND

ovarro tbox_ms-cpu32-s2Match-

Node

ovarro tbox_lt2_firmwareMatch-

AND

ovarro tbox_lt2Match-

Node

ovarro tbox_tg2_firmwareMatch-

AND

ovarro tbox_tg2Match-

Node

ovarro tbox_rm2_firmwareMatch-

AND

ovarro tbox_rm2Match-

[
  {
    "defaultStatus": "unaffected",
    "product": "TBox MS-CPU32",
    "vendor": "Ovarro",
    "versions": [
      {
        "lessThanOrEqual": "1.50.598",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "TBox MS-CPU32-S2",
    "vendor": "Ovarro",
    "versions": [
      {
        "lessThanOrEqual": "1.50.598",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "TBox LT2",
    "vendor": "Ovarro",
    "versions": [
      {
        "lessThanOrEqual": "1.50.598",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "TBox TG2",
    "vendor": "Ovarro",
    "versions": [
      {
        "lessThanOrEqual": "1.50.598",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "TBox RM2",
    "vendor": "Ovarro",
    "versions": [
      {
        "lessThanOrEqual": "1.50.598",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
cisa	www.cisa.gov/news-events/ics-advisories/icsa-23-180-03

21 Nov 2024 08:17Current

6.3Medium risk

Vulners AI Score6.3

CVSS 3.16.5

EPSS0.00045

SSVC