CVE:CVE-2023-36610
CNNVD:CNNVD-202307-081
Ovarro TBox RTUs是德国Ovarro公司的一个模块化远程监控和自动化解决方案。
Ovarro TBox RTUs存在安全特征问题漏洞，该漏洞源于使用不足的熵生成软件安全令牌，用于生成软件令牌的随机种子未正确初始化，攻击者可以成功地暴力破解令牌并验证自己的身份。
solution:Upgrade ovarro tbox_ms-cpu32_firmware to a higher version than 1.50.598,and avoid the version (,1.50.598]; Upgrade ovarro tbox_ms-cpu32-s2_firmware to a higher version than 1.50.598,and avoid the version (,1.50.598]; Upgrade ovarro tbox_lt2_firmware to a higher version than 1.50.598,and avoid the version (,1.50.598]; Upgrade ovarro tbox_tg2_firmware to a higher version than 1.50.598,and avoid the version (,1.50.598]; Upgrade ovarro tbox_rm2_firmware to a higher version than 1.50.598,and avoid the version (,1.50.598]