high7.5
CVE-2021-22644
Ovarro TBox TWinSoft uses the custom hardcoded user “TWinSoft” with a hardcoded key.
Impact
Ovarro TBox TWinSoft uses the custom hardcoded user “TWinSoft” with a hardcoded key.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ovarro | Twinsoft | before 12.4 |
| Ovarro | Tbox Lt2-530 Firmware | before 1.46 |
| Ovarro | Tbox Lt2-532 Firmware | before 1.46 |
| Ovarro | Tbox Lt2-540 Firmware | before 1.46 |
| Ovarro | Tbox Ms-Cpu32 Firmware | before 1.46 |
| Ovarro | Tbox Ms-Cpu32-S2 Firmware | before 1.46 |
| Ovarro | Tbox Rm2 Firmware | before 1.46 |
| Ovarro | Tbox Tg2 Firmware | before 1.46 |