CVE:CVE-2021-22650
CNNVD:CNNVD-202109-1649
Ovarro TWinSoft是德国Ovarro公司的一个应用平台。一个可以随时随地使用其移动设备和PC访问网络功能。
Ovarro TWinSoft 存在路径遍历漏洞，该漏洞源于软件对于参数的过滤存在问题，攻击者可能会利用TWinSoft和恶意源项目文件TPG (malicious source project file)提取正在执行TWinSoft的机器上的文件，从而导致代码执行。
solution:Upgrade ovarro twinsoft to a higher version than 12.4,and avoid the version (,12.4); Upgrade ovarro tbox_lt2-530_firmware to a higher version than 1.46,and avoid the version (,1.46); Upgrade ovarro tbox_lt2-532_firmware to a higher version than 1.46,and avoid the version (,1.46); Upgrade ovarro tbox_lt2-540_firmware to a higher version than 1.46,and avoid the version (,1.46); Upgrade ovarro tbox_ms-cpu32_firmware to a higher version than 1.46,and avoid the version (,1.46); Upgrade ovarro tbox_ms-cpu32-s2_firmware to a higher version than 1.46,and avoid the version (,1.46); Upgrade ovarro tbox_rm2_firmware to a higher version than 1.46,and avoid the version (,1.46); Upgrade ovarro tbox_tg2_firmware to a higher version than 1.46,and avoid the version (,1.46)