Description
The “ipk” package containing the configuration created by TWinSoft can be uploaded, extracted, and executed in Ovarro TBox, allowing malicious code execution.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Ovarro | TBox | LT2, MS-CPU32, MS-CPU32-S2, RM2, TG2 | — |
Advisories 1
- ICSA-21-054-04 Ovarro TBox (Update A) CISA ICS & IT advisories · Sep 23, 2021