CVE-2023-36610

🗓️ 03 Jul 2023 20:01:31Reported by icscertType

The TBox RTUs generate software tokens with insufficient entropy leading to potential brute force attacks

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2023-36610	4 Jul 202300:23	–	circl
CNNVD	Ovarro TBox RTUs 安全特征问题漏洞	3 Jul 202300:00	–	cnnvd
Cvelist	CVE-2023-36610	3 Jul 202320:01	–	cvelist
EUVD	EUVD-2023-40555	3 Oct 202520:07	–	euvd
ICS	Ovarro TBox RTUs	29 Jun 202306:00	–	ics
NVD	CVE-2023-36610	3 Jul 202321:15	–	nvd
Prion	Code injection	3 Jul 202321:15	–	prion
Positive Technologies	PT-2023-25632 · Tbox Rtus · Tbox Rtus	3 Jul 202300:00	–	ptsecurity
Vulnrichment	CVE-2023-36610	3 Jul 202320:01	–	vulnrichment

NVD

Vulners

Node

ovarro tbox_ms-cpu32_firmwareRange≤1.50.598

AND

ovarro tbox_ms-cpu32Match-

Node

ovarro tbox_ms-cpu32-s2_firmwareRange≤1.50.598

AND

ovarro tbox_ms-cpu32-s2Match-

Node

ovarro tbox_lt2_firmwareRange≤1.50.598

AND

ovarro tbox_lt2Match-

Node

ovarro tbox_tg2_firmwareRange≤1.50.598

AND

ovarro tbox_tg2Match-

Node

ovarro tbox_rm2_firmwareRange≤1.50.598

AND

ovarro tbox_rm2Match-

[
  {
    "defaultStatus": "unaffected",
    "product": "TBox MS-CPU32",
    "vendor": "Ovarro",
    "versions": [
      {
        "lessThanOrEqual": "1.50.598",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "TBox MS-CPU32-S2",
    "vendor": "Ovarro",
    "versions": [
      {
        "lessThanOrEqual": "1.50.598",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "TBox LT2",
    "vendor": "Ovarro",
    "versions": [
      {
        "lessThanOrEqual": "1.50.598",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "TBox TG2",
    "vendor": "Ovarro",
    "versions": [
      {
        "lessThanOrEqual": "1.50.598",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "TBox RM2",
    "vendor": "Ovarro",
    "versions": [
      {
        "lessThanOrEqual": "1.50.598",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
cisa	www.cisa.gov/news-events/ics-advisories/icsa-23-180-03

21 Nov 2024 08:10Current

5.7Medium risk

Vulners AI Score5.7

CVSS 3.15.9

EPSS0.00143

SSVC

CWE-331