📦 Tbox Rm2 Firmware

by Ovarro

🔍 What is Tbox Rm2 Firmware?

Description coming soon...

🛡️ Security Overview

Click on a severity to filter vulnerabilities

⚠️ Known Vulnerabilities

CVE-2023-36609

HIGH CVSS 7.2 Jul 3, 2023

This vulnerability affects TBox RTUs running OpenVPN with root privileges. An attacker can set up a local OpenVPN server and push malicious scripts to gain root access on the TBox host. This impacts i...

CVE-2021-22640

HIGH CVSS 7.5 Jul 28, 2022

CVE-2021-22640 allows an attacker to decrypt the Ovarro TBox login password by capturing communication and performing brute-force attacks, potentially leading to unauthorized access to industrial cont...

CVE-2021-22644

HIGH CVSS 7.5 Jul 28, 2022

This vulnerability involves Ovarro TBox TWinSoft software using a hardcoded user account 'TWinSoft' with a static, predictable key. Attackers can exploit this to gain unauthorized access to affected s...

CVE-2021-22648

HIGH CVSS 8.8 Jul 28, 2022

This vulnerability in Ovarro TBox devices allows attackers to read, modify, or delete configuration files via Modbus file access functions. This affects industrial control systems using vulnerable TBo...