CVE-2021-22646

creationtimestamp| type| source ---|---|--- 2022-07-28 18:12:28+00:00| seen| https://t.me/cibsecurity/47201 2025-04-17 15:57:54+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12269...

CVE-2021-22646 Ovarro TBox Code Injection

The “ipk” package containing the configuration created by TWinSoft can be uploaded, extracted, and executed in Ovarro TBox, allowing malicious code execution...

CVE-2021-22646

CVE-2021-22646 is a code injection vulnerability in Ovarro TBox where the ipk package containing TWinSoft configurations can be uploaded, extracted, and executed on affected RTUs, enabling remote code execution. Affected products include TBoxLT2, TBox MS-CPU32, TBox MS-CPU32-S2, TBox RM2, and TBo...