CVE:CVE-2023-36609
CNNVD:CNNVD-202307-101
Ovarro TBox RTUs是德国Ovarro公司的一个模块化远程监控和自动化解决方案。
Ovarro TBox RTUs存在安全漏洞，该漏洞源于以root权限运行OpenVPN，并且可以运行用户定义的配置脚本，攻击者可以建立本地OpenVPN服务器并将恶意脚本推送到主机上以获取root权限。
solution:Upgrade ovarro tbox_ms-cpu32_firmware to a higher version than 1.50.598,and avoid the version (,1.50.598]; Upgrade ovarro tbox_ms-cpu32-s2_firmware to a higher version than 1.50.598,and avoid the version (,1.50.598]; Upgrade ovarro tbox_lt2_firmware to a higher version than 1.50.598,and avoid the version (,1.50.598]; Upgrade ovarro tbox_tg2_firmware to a higher version than 1.50.598,and avoid the version (,1.50.598]; Upgrade ovarro tbox_rm2_firmware to a higher version than 1.50.598,and avoid the version (,1.50.598]