CVE:CVE-2021-22648
CNNVD:CNNVD-202103-1306
Ovarro TWinSoft是德国Ovarro公司的一个应用平台。一个可以随时随地使用其移动设备和PC访问网络功能。
Ovarro TWinSoft 存在安全漏洞，该漏洞源于TBox专有的Modbus文件访问功能使攻击者可以读取，更改或删除配置文件。
solution:Upgrade ovarro twinsoft to a higher version than 12.4,and avoid the version (,12.4); Upgrade ovarro tbox_lt2-530_firmware to a higher version than 1.46,and avoid the version (,1.46); Upgrade ovarro tbox_lt2-532_firmware to a higher version than 1.46,and avoid the version (,1.46); Upgrade ovarro tbox_lt2-540_firmware to a higher version than 1.46,and avoid the version (,1.46); Upgrade ovarro tbox_ms-cpu32_firmware to a higher version than 1.46,and avoid the version (,1.46); Upgrade ovarro tbox_ms-cpu32-s2_firmware to a higher version than 1.46,and avoid the version (,1.46); Upgrade ovarro tbox_rm2_firmware to a higher version than 1.46,and avoid the version (,1.46); Upgrade ovarro tbox_tg2_firmware to a higher version than 1.46,and avoid the version (,1.46)