Lucene search
IcscertCVELIST:CVE-2021-22640HistoryJul 28, 2022 - 2:18 p.m.
CVE-2021-22640 Ovarro TBox Insufficiently Protected Credentials
2022-07-2814:18:04
icscert
www.cve.org
2
cve-2021-22640
ovarro tbox
insufficiently protected
credentials
decrypt
login
password
communication capture
brute force
attacks
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
AI Score
9.8
Confidence
High
EPSS
0.002
Percentile
57.0%
An attacker can decrypt the Ovarro TBox login password by communication capture and brute force attacks.
CNA Affected
[
{
"product": "TBox",
"vendor": "Ovarro",
"versions": [
{
"status": "affected",
"version": "LT2"
},
{
"status": "affected",
"version": "MS-CPU32"
},
{
"status": "affected",
"version": "MS-CPU32-S2"
},
{
"status": "affected",
"version": "RM2"
},
{
"status": "affected",
"version": "TG2"
}
]
}
]Related
cve
cve
CVE-2021-22640
2022-07-28 15:15:07
nvd
nvd
CVE-2021-22640
2022-07-28 15:15:07
prion
prion
Information disclosure
2022-07-28 15:15:00
thn
thn
Flaws in Ovarro TBox RTUs Could Open Industrial Systems to Remote Attacks
2021-03-29 15:28:00
ics
ics
Ovarro TBox (Update A)
2021-09-23 12:00:00
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
AI Score
9.8
Confidence
High
EPSS
0.002
Percentile
57.0%
Related for CVELIST:CVE-2021-22640