CVE-2023-36609
HighCVSS 7.2Exploitation Probability (EPSS)
Low risk42th percentile - higher than 42% of all known CVEs
Summary
Affected TBox RTUs run OpenVPN with root privileges and can run user defined configuration scripts. An attacker could set up a local OpenVPN server and push a malicious script onto the TBox host to acquire root privileges.
Risk Assessment
The risk to the organization is the potential for an attacker to gain full control over the TBox device, which could lead to serious security breaches.
Recommendation
It is recommended to restrict access to TBox devices and to monitor and verify configuration scripts to prevent the introduction of malicious software.
Other vulnerabilities in TBox RTUs
See all- CVE-2023-36611Medium
Affected TBox RTUs allow low privilege users to access software security tokens of higher privilege. An attacker with 'user' privileges could access files requiring higher privileges by establishing an SSH session and providing the other tokens.
- CVE-2023-36608Medium
Affected TBox RTUs store hashed passwords using MD5 encryption, which is considered insecure.
Original NVD description (English source)
The affected TBox RTUs run OpenVPN with root privileges and can run user defined configuration scripts. An attacker could set up a local OpenVPN server and push a malicious script onto the TBox host to acquire root privileges.