CVE-2021-22646 — Ovarro TBox Code Injection

CVE-2021-22646

Ovarro TBox Code Injection PUBLISHED

Description (CNA)

The “ipk” package containing the configuration created by TWinSoft can be uploaded, extracted, and executed in Ovarro TBox, allowing malicious code execution.

Affected (CNA)

Vendor / product	Versions
Ovarro / TBox	affected LT2; affected MS-CPU32; affected MS-CPU32-S2; affected RM2; affected TG2

CWE

No CWE identifiers supplied.

References

https://www.cisa.gov/uscert/ics/advisories/icsa-21-054-04

ADP enrichment

CVE

No English description supplied.

https://www.cisa.gov/uscert/ics/advisories/icsa-21-054-04

CISA-ADP

No English description supplied.

No references supplied.