medium5.3
CVE-2023-36607
The affected TBox RTUs are missing authorization for running some API commands.
Impact
The affected TBox RTUs are missing authorization for running some API commands. An attacker running these commands could reveal sensitive information such as software versions and web server file contents.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ovarro | Tbox Ms-Cpu32 Firmware | through 1.50.598 |
| Ovarro | Tbox Ms-Cpu32-S2 Firmware | through 1.50.598 |
| Ovarro | Tbox Lt2 Firmware | through 1.50.598 |
| Ovarro | Tbox Tg2 Firmware | through 1.50.598 |
| Ovarro | Tbox Rm2 Firmware | through 1.50.598 |