CVE-2021-22650

Mô tả

Tham khảo

• cisa.gov/uscert/ics/advisories/icsa-21-054-04 · Third Party Advisory

Lỗ hổng khác của twinsoft

• CVE-2021-22648NGHIÊM TRỌNG 9.8Ovarro TBox proprietary Modbus file access functions allow attackers to read, alter, or delete the configuration file.
• CVE-2021-22646NGHIÊM TRỌNG 9.8The “ipk” package containing the configuration created by TWinSoft can be uploaded, extracted, and executed in Ovarro TBox, allowing malicio…
• CVE-2021-22644NGHIÊM TRỌNG 9.8Ovarro TBox TWinSoft uses the custom hardcoded user “TWinSoft” with a hardcoded key.
• CVE-2021-22642CAO 7.5An attacker could use specially crafted invalid Modbus frames to crash the Ovarro TBox system.
• CVE-2021-22640NGHIÊM TRỌNG 9.8An attacker can decrypt the Ovarro TBox login password by communication capture and brute force attacks.