101 matches found
CVE-2021-22642 Ovarro TBox Uncontrolled Resource Consumption
An attacker could use specially crafted invalid Modbus frames to crash the Ovarro TBox system...
CVE-2021-22642
CVE-2021-22642 corresponds to an Ovarro TBox vulnerability in which a remote attacker can crash the device by sending specially crafted invalid Modbus frames. The issue affects multiple TBox RTU products (e.g., TBox LT2, TBox MS-CPU32, MS-CPU32-S2, RM2, TG2) and is described under ICSA-21-054-04 ...
PT-2022-9257 · Ovarro · Ovarro Tbox
Name of the Vulnerable Software and Affected Versions: Ovarro TBox affected versions not specified Description: An attacker can decrypt the Ovarro TBox login password by capturing communication and using brute force attacks. Recommendations: At the moment, there is no information about a newer...
CVE-2021-22642: Uncontrolled Resource Consumption
An attacker could use specially crafted invalid Modbus frames to crash the Ovarro TBox system...
PT-2022-9259 · Ovarro · Ovarro Tbox Twinsoft
Name of the Vulnerable Software and Affected Versions: Ovarro TBox TWinSoft affected versions not specified Description: The issue concerns the use of a custom hardcoded user TWinSoft with a hardcoded key in Ovarro TBox TWinSoft. Recommendations: At the moment, there is no information about a new...
CVE-2021-22646: Improper Control of Generation of Code
The “ipk” package containing the configuration created by TWinSoft can be uploaded, extracted, and executed in Ovarro TBox, allowing malicious code execution...
CVE-2021-22644: Use of Hard-coded Credentials
Ovarro TBox TWinSoft uses the custom hardcoded user “TWinSoft” with a hardcoded key...
PT-2022-9258 · Ovarro · Ovarro Tbox
Name of the Vulnerable Software and Affected Versions: Ovarro TBox affected versions not specified Description: An attacker could use specially crafted invalid Modbus frames to crash the Ovarro TBox system. Recommendations: At the moment, there is no information about a newer version that contain...
PT-2022-9261 · Ovarro · Ovarro Tbox
Name of the Vulnerable Software and Affected Versions: Ovarro TBox affected versions not specified Description: The issue allows attackers to read, alter, or delete the configuration file through Ovarro TBox proprietary Modbus file access functions. Recommendations: At the moment, there is no...
PT-2022-9260 · Ovarro · Ovarro Tbox
Name of the Vulnerable Software and Affected Versions: Ovarro TBox affected versions not specified Description: The issue allows malicious code execution by uploading, extracting, and executing the "ipk" package containing the configuration created by TWinSoft in Ovarro TBox. Recommendations: At...
CVE-2021-22648: Incorrect Permission Assignment for Critical Resource
Ovarro TBox proprietary Modbus file access functions allow attackers to read, alter, or delete the configuration file...
CVE-2021-22640: Authentication Bypass by Capture-replay
An attacker can decrypt the Ovarro TBox login password by communication capture and brute force attacks...
Ovarro Tbox Denial of Service Vulnerability
Ovarro Tbox is an application platform from Ovarro Germany. It offers new automation possibilities, simplifies system engineering and enables key industries worldwide to remotely control and monitor their applications. A security vulnerability in several Ovarro Tbox products can be exploited by a...
Ovarro Tbox Information Disclosure Vulnerability
Ovarro Tbox is an application platform from Ovarro Germany. It offers new automation possibilities, simplifies system engineering and enables key industries worldwide to remotely control and monitor their applications. A security vulnerability exists in the Ovarro Tbox product, which can be...
Flaws in Ovarro TBox RTUs Could Open Industrial Systems to Remote Attacks
As many as five vulnerabilities have been uncovered in Ovarro's TBox remote terminal units RTUs that, if left unpatched, could open the door for escalating attacks against critical infrastructures, like remote code execution and denial-of-service. "Successful exploitation of these vulnerabilities...
Flaws in Ovarro TBox RTUs Could Open Industrial Systems to Remote Attacks
As many as five vulnerabilities have been uncovered in Ovarro's TBox remote terminal units RTUs that, if left unpatched, could open the door for escalating attacks against critical infrastructures, like remote code execution and denial-of-service. "Successful exploitation of these vulnerabilities...
Ovarro TWinSoft 安全漏洞
Ovarro Tbox is an application platform from Ovarro Germany. It offers new automation possibilities, simplifies system engineering and enables key industries worldwide to remotely control and monitor their applications. A security vulnerability exists in the Ovarro Tbox product, which can be...
Ovarro Tbox 资源管理错误漏洞
Ovarro Tbox is an application platform from Ovarro Germany. It offers new automation possibilities, simplifies system engineering and enables key industries worldwide to remotely control and monitor their applications. A security vulnerability in several Ovarro Tbox products can be exploited by a...
Ovarro TBox (Update A)
1. EXECUTIVE SUMMARY CVSS v3 8.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Ovarro Equipment: TBoxLT2 All models, TBox MS-CPU32, TBox MS-CPU32-S2, TBox RM2 All models, TBox TG2 All models --------- Begin Update A Part 1 of 3 --------- Vulnerabilities: Code Injection,...
