PT-2023-25633 · Tbox Rtus · Tbox Rtus

Floris Hendriks + 2 · Publicado 2023-07-03 · Atualizado 2023-07-07 · CVE-2023-36611

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions TBox RTUs (affected versions not specified)

Description The issue allows low privilege users to access software security tokens of higher privilege. This could enable an attacker with user privileges to access files requiring higher privileges by establishing an SSH session and providing the other tokens.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authorization

Enumeração de Fraquezas

CWE-285

Identificadores relacionados

CVE-2023-36611

Produtos afetados

Tbox Rtus

Referências · 4

• https://t.me/cibsecurity/65895 · Publicação no Telegram
• https://cisa.gov/news-events/ics-advisories/icsa-23-180-03 · Nota
• https://osv.dev/vulnerability/CVE-2023-36611 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-36611 · Nota de Segurança