CVE-2023-36609

🗓️ 03 Jul 2023 19:59:08Reported by icscertType

The TBox RTUs run OpenVPN with root privileges, allowing execution of user-defined scripts. Local OpenVPN server setup by attacker could acquire root privileges

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2023-36609	4 Jul 202300:22	–	circl
CNNVD	Ovarro TBox RTUs 安全漏洞	3 Jul 202300:00	–	cnnvd
Cvelist	CVE-2023-36609	3 Jul 202319:59	–	cvelist
EUVD	EUVD-2023-40554	3 Oct 202520:07	–	euvd
ICS	Ovarro TBox RTUs	29 Jun 202306:00	–	ics
NVD	CVE-2023-36609	3 Jul 202320:15	–	nvd
OSV	CVE-2023-36609	3 Jul 202320:15	–	osv
Prion	Default configuration	3 Jul 202320:15	–	prion
Positive Technologies	PT-2023-25630 · Tbox Rtus +1 · Tbox Rtus +1	3 Jul 202300:00	–	ptsecurity
Vulnrichment	CVE-2023-36609	3 Jul 202319:59	–	vulnrichment

NVD

Vulners

Vulnrichment

Node

ovarro tbox_ms-cpu32_firmwareRange≤1.50.598

AND

ovarro tbox_ms-cpu32Match-

Node

ovarro tbox_ms-cpu32-s2_firmwareRange≤1.50.598

AND

ovarro tbox_ms-cpu32-s2Match-

Node

ovarro tbox_lt2_firmwareRange≤1.50.598

AND

ovarro tbox_lt2Match-

Node

ovarro tbox_tg2_firmwareRange≤1.50.598

AND

ovarro tbox_tg2Match-

Node

ovarro tbox_rm2_firmwareRange≤1.50.598

AND

ovarro tbox_rm2Match-

[
  {
    "defaultStatus": "unaffected",
    "product": "TBox MS-CPU32",
    "vendor": "Ovarro",
    "versions": [
      {
        "lessThanOrEqual": "1.50.598",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "TBox MS-CPU32-S2",
    "vendor": "Ovarro",
    "versions": [
      {
        "lessThanOrEqual": "1.50.598",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "TBox LT2",
    "vendor": "Ovarro",
    "versions": [
      {
        "lessThanOrEqual": "1.50.598",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "TBox TG2",
    "vendor": "Ovarro",
    "versions": [
      {
        "lessThanOrEqual": "1.50.598",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "TBox RM2",
    "vendor": "Ovarro",
    "versions": [
      {
        "lessThanOrEqual": "1.50.598",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
cisa	www.cisa.gov/news-events/ics-advisories/icsa-23-180-03

21 Nov 2024 08:10Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.17.2

EPSS0.00082

SSVC

CWE-829