Skip to content
OpenAdvisories
High ICSA-21-054-04 6 CVEs

Ovarro TBox (Update A)

Published Feb 23, 2021 · Updated Sep 23, 2021 · Revision 3

Vendor: Ovarro Product: TBox MS-CPU32 Product: ​TBox MS-CPU32-S2 Product: TBox RM2 (All models) Product: TBox TG2 (All models) Product: TBoxLT2 (All models)

Summary

Successful exploitation of these vulnerabilities could result in remote code execution, which may cause a denial-of-service condition.

Vulnerabilities 6

  • High 8.8
    CVE-2021-22646

    Ovarro TBox Code Injection

    The “ipk” package containing the configuration created by TWinSoft can be uploaded, extracted, and executed in Ovarro TBox, allowing malicious code execution.

    Ovarro TBox
  • High 8.8
    CVE-2021-22648

    Ovarro TBox Incorrect Permission Assignment for Critical Resource

    Ovarro TBox proprietary Modbus file access functions allow attackers to read, alter, or delete the configuration file.

    Ovarro TBox
  • High 7.5
    CVE-2021-22640

    Ovarro TBox Insufficiently Protected Credentials

    An attacker can decrypt the Ovarro TBox login password by communication capture and brute force attacks.

    Ovarro TBox
  • High 7.5
    CVE-2021-22642

    Ovarro TBox Uncontrolled Resource Consumption

    An attacker could use specially crafted invalid Modbus frames to crash the Ovarro TBox system.

    Ovarro TBox
  • High 7.5
    CVE-2021-22644

    Ovarro TBox Use of Hard-coded Cryptographic Key

    Ovarro TBox TWinSoft uses the custom hardcoded user “TWinSoft” with a hardcoded key.

    Ovarro TBox
  • High 7.5
    CVE-2021-22650

    Ovarro TBox Relative Path Traversal

    An attacker may use TWinSoft and a malicious source project file (TPG) to extract files on machine executing Ovarro TWinSoft, which could lead to code execution.

    Ovarro TBox

Revision history

  1. #3

    ICSA-21-054-04 Ovarro TBox (Update B)

  2. #2

    ICSA-21-054-04 Ovarro TBox (Update A)

  3. #1

    ICSA-21-054-04P Ovarro TBox

References