CVE-2023-36611

The affected TBox RTUs allow low privilege users to access software security tokens of higher privilege. This could allow an attacker with user privileges to access files requiring higher privileges by establishing an SSH session and providing the other tokens.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
6.5 MEDIUM
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
icscertCNA
6.5 MEDIUM
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVEADP
---
---
CISA-ADPADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 25%
VendorProductVersion
ovarrotbox_ms-cpu32_firmware
𝑥
≤ 1.50.598
ovarrotbox_ms-cpu32-s2_firmware
𝑥
≤ 1.50.598
ovarrotbox_lt2_firmware
𝑥
≤ 1.50.598
ovarrotbox_tg2_firmware
𝑥
≤ 1.50.598
ovarrotbox_rm2_firmware
𝑥
≤ 1.50.598
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://www.cisa.gov/news-events/ics-advisories/icsa-23-180-03
https://www.cisa.gov/news-events/ics-advisories/icsa-23-180-03