CVE-2021-22640
High
Description
An attacker can decrypt the Ovarro TBox login password by communication capture and brute force attacks.
SeverityHigh
CVSS7.5
Exploit probability—
ProductOvarro Tbox Lt2-530 Firmware
PublishedJul 28, 2022
First seenJul 28, 2022
Weakness typeCWE-522CWE-522
How to fix
Update
- ovarro tbox_lt2-530_firmware1.46 or later
- ovarro twinsoft12.4 or later
- ovarro tbox_lt2-532_firmware1.46 or later
- ovarro tbox_lt2-540_firmware1.46 or later
- ovarro tbox_ms-cpu32_firmware1.46 or later
- ovarro tbox_ms-cpu32-s2_firmware1.46 or later
- ovarro tbox_rm2_firmware1.46 or later
- ovarro tbox_tg2_firmware1.46 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ovarro tbox_lt2-530_firmware | v < 1.46 | 1.46 |
| ovarro twinsoft | v < 12.4 | 12.4 |
| ovarro tbox_lt2-532_firmware | v < 1.46 | 1.46 |
| ovarro tbox_lt2-540_firmware | v < 1.46 | 1.46 |
| ovarro tbox_ms-cpu32_firmware | v < 1.46 | 1.46 |
| ovarro tbox_ms-cpu32-s2_firmware | v < 1.46 | 1.46 |
| ovarro tbox_rm2_firmware | v < 1.46 | 1.46 |
| ovarro tbox_tg2_firmware | v < 1.46 | 1.46 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.