CVE-2023-36611
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk32th percentile - higher than 32% of all known CVEs
Summary
Affected TBox RTUs allow low privilege users to access software security tokens of higher privilege. An attacker with 'user' privileges could access files requiring higher privileges by establishing an SSH session and providing the other tokens.
Risk Assessment
The ability for unauthorized users to access sensitive files poses a serious security threat to the system. This could lead to data exposure or unauthorized changes within the system.
Recommendation
It is recommended to restrict access to security tokens and implement additional security measures such as stronger authentication for SSH sessions. A user privilege audit should also be conducted.
Original NVD description (English source)
The affected TBox RTUs allow low privilege users to access software security tokens of higher privilege. This could allow an attacker with “user” privileges to access files requiring higher privileges by establishing an SSH session and providing the other tokens.