CVE-2023-36611

MEDIUM

6.5

Beschreibung

The affected TBox RTUs allow low privilege users to access software security tokens of higher privilege. This could allow an attacker with “user” privileges to access files requiring higher privileges by establishing an SSH session and providing the other tokens.

CVE Details

CVSS v3.1 Bewertung6.5

SchweregradMEDIUM

CVSS VektorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AngriffsvektorNETWORK

KomplexitatLOW

Erforderliche PrivilegienLOW

BenutzerinteraktionNONE

Veroffentlicht7/3/2023

Zuletzt geandert11/21/2024

Quellenvd

Honeypot-Sichtungen0

Betroffene Produkte

ovarro:tbox_lt2ovarro:tbox_lt2_firmwareovarro:tbox_ms-cpu32ovarro:tbox_ms-cpu32-s2ovarro:tbox_ms-cpu32-s2_firmwareovarro:tbox_ms-cpu32_firmwareovarro:tbox_rm2ovarro:tbox_rm2_firmwareovarro:tbox_tg2ovarro:tbox_tg2_firmware

Schwachen (CWE)

CWE-285

Referenzen

https://www.cisa.gov/news-events/ics-advisories/icsa-23-180-03(ics-cert@hq.dhs.gov)

https://www.cisa.gov/news-events/ics-advisories/icsa-23-180-03(af854a3a-2127-422b-91ae-364da2661108)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.