CVE:CVE-2023-36607
CNNVD:CNNVD-202306-2178
Ovarro TBox RTUs是德国Ovarro公司的一个模块化远程监控和自动化解决方案。
Ovarro TBox RTU 存在安全漏洞，该漏洞源于缺少运行某些 API 命令的授权，攻击者利用该漏洞可能会泄露敏感信息，例如软件版本和 Web 服务器文件内容。
solution:Upgrade ovarro tbox_ms-cpu32_firmware to a higher version than 1.50.598,and avoid the version (,1.50.598]; Upgrade ovarro tbox_ms-cpu32-s2_firmware to a higher version than 1.50.598,and avoid the version (,1.50.598]; Upgrade ovarro tbox_lt2_firmware to a higher version than 1.50.598,and avoid the version (,1.50.598]; Upgrade ovarro tbox_tg2_firmware to a higher version than 1.50.598,and avoid the version (,1.50.598]; Upgrade ovarro tbox_rm2_firmware to a higher version than 1.50.598,and avoid the version (,1.50.598]