high7.5
CVE-2021-22650
An attacker may use TWinSoft and a malicious source project file (TPG) to extract files on machine executing Ovarro TWinSoft, which could lead to code executio…
Impact
An attacker may use TWinSoft and a malicious source project file (TPG) to extract files on machine executing Ovarro TWinSoft, which could lead to code execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ovarro | Twinsoft | before 12.4 |
| Ovarro | Tbox Lt2-530 Firmware | before 1.46 |
| Ovarro | Tbox Lt2-532 Firmware | before 1.46 |
| Ovarro | Tbox Lt2-540 Firmware | before 1.46 |
| Ovarro | Tbox Ms-Cpu32 Firmware | before 1.46 |
| Ovarro | Tbox Ms-Cpu32-S2 Firmware | before 1.46 |
| Ovarro | Tbox Rm2 Firmware | before 1.46 |
| Ovarro | Tbox Tg2 Firmware | before 1.46 |