CVE:CVE-2023-36611
CNNVD:CNNVD-202307-078
Ovarro TBox RTUs是德国Ovarro公司的一个模块化远程监控和自动化解决方案。
Ovarro TBox RTUs存在授权问题漏洞，该漏洞源于允许低权限用户访问更高权限的软件安全令牌，可能允许攻击者通过建立SSH会话并提供其他令牌来访问需要更高权限的文件。
solution:Upgrade ovarro tbox_ms-cpu32_firmware to a higher version than 1.50.598,and avoid the version (,1.50.598]; Upgrade ovarro tbox_ms-cpu32-s2_firmware to a higher version than 1.50.598,and avoid the version (,1.50.598]; Upgrade ovarro tbox_lt2_firmware to a higher version than 1.50.598,and avoid the version (,1.50.598]; Upgrade ovarro tbox_tg2_firmware to a higher version than 1.50.598,and avoid the version (,1.50.598]; Upgrade ovarro tbox_rm2_firmware to a higher version than 1.50.598,and avoid the version (,1.50.598]