PT-2022-9261 · Ovarro · Ovarro Tbox

Uri Katz · Published 2022-07-28 · Updated 2022-08-04 · CVE-2021-22648

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Ovarro TBox (affected versions not specified)

Description The issue allows attackers to read, alter, or delete the configuration file through Ovarro TBox proprietary Modbus file access functions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

CVE-2021-22648

Affected Products

Ovarro Tbox

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2021-22648 · Security Note
• https://osv.dev/vulnerability/CVE-2021-22648 · Vendor Advisory
• https://t.me/cibsecurity/47203 · Telegram Post
• https://cisa.gov/uscert/ics/advisories/icsa-21-054-04 · Note