CVE-2023-36608 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	6.5 MEDIUM	NETWORK	LOW	LOW	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
icscert	CNA	6.5 MEDIUM	NETWORK	LOW	LOW	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVE	ADP	---				---
CISA-ADP	ADP	---				---

Base Score

CVSS 3.x

EPSS Score

Percentile: 13%

Vendor	Product	Version
ovarro	tbox_ms-cpu32_firmware	1.46 ≤ 𝑥 ≤ 1.50.598
ovarro	tbox_ms-cpu32-s2_firmware	1.46 ≤ 𝑥 ≤ 1.50.598
ovarro	tbox_lt2_firmware	1.46 ≤ 𝑥 ≤ 1.50.598
ovarro	tbox_tg2_firmware	1.46 ≤ 𝑥 ≤ 1.50.598
ovarro	tbox_rm2_firmware	1.46 ≤ 𝑥 ≤ 1.50.598

𝑥

= Vulnerable software versions

Common Weakness Enumeration

CWE-327 - Use of a Broken or Risky Cryptographic Algorithm
The use of a broken or risky cryptographic algorithm is an unnecessary risk that may result in the exposure of sensitive information.

References

https://www.cisa.gov/news-events/ics-advisories/icsa-23-180-03

https://www.cisa.gov/news-events/ics-advisories/icsa-23-180-03