Vulnerabilities > CVE-2023-36607 - Missing Authorization vulnerability in Ovarro products
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
LOW Integrity impact
NONE Availability impact
NONE Summary
The affected TBox RTUs are missing authorization for running some API commands. An attacker running these commands could reveal sensitive information such as software versions and web server file contents.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| OS | 7 | |
| Hardware | 5 |