Lucene search
IcscertCVELIST:CVE-2021-22648HistoryJul 28, 2022 - 2:18 p.m.
CVE-2021-22648 Ovarro TBox Incorrect Permission Assignment for Critical Resource
2022-07-2814:18:45
icscert
www.cve.org
2
cve-2021-22648
ovarro tbox
modbus file access
configuration file
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
9.6
Confidence
High
EPSS
0.002
Percentile
57.0%
Ovarro TBox proprietary Modbus file access functions allow attackers to read, alter, or delete the configuration file.
CNA Affected
[
{
"product": "TBox",
"vendor": "Ovarro",
"versions": [
{
"status": "affected",
"version": "LT2"
},
{
"status": "affected",
"version": "MS-CPU32"
},
{
"status": "affected",
"version": "MS-CPU32-S2"
},
{
"status": "affected",
"version": "RM2"
},
{
"status": "affected",
"version": "TG2"
}
]
}
]Related
cve
cve
CVE-2021-22648
2022-07-28 15:15:07
prion
prion
Design/Logic Flaw
2022-07-28 15:15:00
nvd
nvd
CVE-2021-22648
2022-07-28 15:15:07
thn
thn
Flaws in Ovarro TBox RTUs Could Open Industrial Systems to Remote Attacks
2021-03-29 15:28:00
ics
ics
Ovarro TBox (Update A)
2021-09-23 12:00:00
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
9.6
Confidence
High
EPSS
0.002
Percentile
57.0%
Related for CVELIST:CVE-2021-22648