CVSS 3.1
5.3 mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NCVE-2023-36607
Medium (5.3) in ovarro. EPSS 0.5% chance of exploitation in the next 30 days.
The affected TBox RTUs are missing authorization for running some API commands. An attacker running these commands could reveal sensitive information such as software versions and web server file contents.
Severity
- EPSS
- 0.5% chance of exploitation in the next 30 days; higher than 42% of CVEs (scores of 2026-10-31)
- CWE
- CWE-862
- Published
- Modified
- Record from
- the NVD, synced
Affected
- ovarro:tbox_lt2_firmware
- ovarro:tbox_ms-cpu32-s2_firmware
- ovarro:tbox_ms-cpu32_firmware
- ovarro:tbox_rm2_firmware
- ovarro:tbox_tg2_firmware