CVE-2023-36607CWE-862

CVE-2023-36607: vulnerability in Ovarro TBox LT2

CVE-2023-36607

Published · Updated

Follow this CVE+ Monitor TBox LT2+ Monitor TBox MS-CPU32

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.5%
The affected TBox RTUs are missing authorization for running some API commands. An attacker running these commands could reveal sensitive information such as software versions and web server file contents.
Affected products
Ovarro · TBox LT2Ovarro · TBox MS-CPU32Ovarro · TBox MS-CPU32-S2Ovarro · TBox RM2Ovarro · TBox TG2
Related CVEs — Ovarro TBox LT2

In the same product, most dangerous first.

CVE-2023-36609HIGHCVE-2023-36609EPSS 0.7%CVE-2023-36610MEDIUMCVE-2023-36610EPSS 0.5%CVE-2023-36611MEDIUMCVE-2023-36611EPSS 0.5%CVE-2023-3395MEDIUMCVE-2023-3395EPSS 0.3%CVE-2023-36608MEDIUMCVE-2023-36608EPSS 0.2%