Description
An attacker may use TWinSoft and a malicious source project file (TPG) to extract files on machine executing Ovarro TWinSoft, which could lead to code execution.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Ovarro | TBox | LT2, MS-CPU32, MS-CPU32-S2, RM2, TG2 | — |
Advisories 1
- ICSA-21-054-04 Ovarro TBox (Update A) CISA ICS & IT advisories · Sep 23, 2021