Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-36610
HistoryJul 03, 2023 - 9:15 p.m.

Code injection

2023-07-0321:15:00
PRIOn knowledge base
www.prio-n.com
3
tbox rtus
software tokens
predictable values
code injection
security vulnerability

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.6%

?The affected TBox RTUs generate software security tokens using insufficient entropy. The random seed used to generate the software tokens is not initialized correctly, and other parts of the token are generated using predictable time-based values. An attacker with this knowledge could successfully brute force the token and authenticate themselves.

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.6%

Related for PRION:CVE-2023-36610