Vulnerabilities in Ovarro

12 results

Vexday analysis

Ovarro apresenta 12 vulnerabilidades catalogadas na base Vexday, nenhuma delas sob ataque ativo (KEV) ou classificada como crítica. A fraqueza dominante é CWE-23 (path traversal), indicando problemas de validação de caminho de arquivo. Nenhuma vulnerabilidade foi publicada nos últimos 90 dias, sugerindo que o risco atual é de natureza histórica e não imediatamente emergente.

CVE-2021-22646HIGHOvarro TBox Code InjectionEPSS 1.3%CVE-2021-22650HIGHOvarro TBox Relative Path TraversalEPSS 1.2%CVE-2021-22648HIGHOvarro TBox Incorrect Permission Assignment for Critical ResourceEPSS 0.8%CVE-2021-22642HIGHOvarro TBox Uncontrolled Resource ConsumptionEPSS 0.8%CVE-2021-22640HIGHOvarro TBox Insufficiently Protected CredentialsEPSS 0.8%CVE-2021-22644HIGHOvarro TBox Use of Hard-coded Cryptographic KeyEPSS 0.8%CVE-2023-36609HIGH The affected TBox RTUs run OpenVPN with root privileges and can run user defined configuration scripts. An attacker could set up a local OpEPSS 0.7%CVE-2023-36610MEDIUM The affected TBox RTUs generate software security tokens using insufficient entropy. The random seed used to generate the software tokens EPSS 0.5%CVE-2023-36611MEDIUM The affected TBox RTUs allow low privilege users to access software security tokens of higher privilege. This could allow an attacker with EPSS 0.5%CVE-2023-36607—CVE-2023-36607EPSS 0.5%CVE-2023-3395MEDIUM All versions of the TWinSoft Configuration Tool store encrypted passwords as plaintext in memory. An attacker with access to system files EPSS 0.3%CVE-2023-36608MEDIUM The affected TBox RTUs store hashed passwords using MD5 encryption, which is an insecure encryption algorithm.EPSS 0.2%