high7.5
CVE-2021-22640
An attacker can decrypt the Ovarro TBox login password by communication capture and brute force attacks.
Impact
An attacker can decrypt the Ovarro TBox login password by communication capture and brute force attacks.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ovarro | Twinsoft | before 12.4 |
| Ovarro | Tbox Lt2-530 Firmware | before 1.46 |
| Ovarro | Tbox Lt2-532 Firmware | before 1.46 |
| Ovarro | Tbox Lt2-540 Firmware | before 1.46 |
| Ovarro | Tbox Ms-Cpu32 Firmware | before 1.46 |
| Ovarro | Tbox Ms-Cpu32-S2 Firmware | before 1.46 |
| Ovarro | Tbox Rm2 Firmware | before 1.46 |
| Ovarro | Tbox Tg2 Firmware | before 1.46 |