2 lines
5.1 KiB
JSON
2 lines
5.1 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"TBox MS-CPU32","vendor":"Ovarro","versions":[{"lessThanOrEqual":"1.50.598","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"TBox MS-CPU32-S2","vendor":"Ovarro","versions":[{"lessThanOrEqual":"1.50.598","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"TBox LT2","vendor":"Ovarro","versions":[{"lessThanOrEqual":"1.50.598","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"TBox TG2","vendor":"Ovarro","versions":[{"lessThanOrEqual":"1.50.598","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"TBox RM2","vendor":"Ovarro","versions":[{"lessThanOrEqual":"1.50.598","status":"affected","version":"0","versionType":"custom"}]}],"source":"ics-cert@hq.dhs.gov"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:ovarro:tbox_ms-cpu32_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"D7876F5D-AF54-468B-A201-36021E8FEC16","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:ovarro:tbox_ms-cpu32:-:*:*:*:*:*:*:*","matchCriteriaId":"0746C27E-6100-430A-8005-F71C8D24E827","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:ovarro:tbox_ms-cpu32-s2_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"08D95811-0B73-414E-A643-CF3AFBD1EAA8","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:ovarro:tbox_ms-cpu32-s2:-:*:*:*:*:*:*:*","matchCriteriaId":"1753583A-93AC-4DBE-8E2C-A4816B8D1D11","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:ovarro:tbox_lt2_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"9BFF572B-11C8-4353-93F5-74D48A055B1A","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:ovarro:tbox_lt2:-:*:*:*:*:*:*:*","matchCriteriaId":"AACB5343-6982-4BC9-8173-E62160DF4595","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:ovarro:tbox_tg2_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"402F6FF6-C9A7-400F-834E-407147689D07","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:ovarro:tbox_tg2:-:*:*:*:*:*:*:*","matchCriteriaId":"551340E5-D721-40F1-8D14-CBF87A68BFB3","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:ovarro:tbox_rm2_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"35408F1E-B380-4EBD-AF41-1388F1C5999B","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:ovarro:tbox_rm2:-:*:*:*:*:*:*:*","matchCriteriaId":"F73C576F-9BAB-4C8E-9B47-9C930B67C910","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"}],"cveTags":[],"descriptions":[{"lang":"en","value":"\nAll versions of the TWinSoft Configuration Tool store encrypted passwords as plaintext in memory. An attacker with access to system files could open a file to load the document into memory, including sensitive information associated with document, such as password. The attacker could then obtain the plaintext password by using a memory viewer.\n\n"}],"id":"CVE-2023-3395","lastModified":"2026-06-17T06:13:59.533","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":6.5,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"exploitabilityScore":2.8,"impactScore":3.6,"source":"ics-cert@hq.dhs.gov","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":6.5,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"exploitabilityScore":2.8,"impactScore":3.6,"source":"nvd@nist.gov","type":"Primary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2023-3395","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2024-10-24T19:53:22.213521Z","version":"2.0.3"}}]},"published":"2023-07-03T21:15:10.107","references":[{"source":"ics-cert@hq.dhs.gov","tags":["Mitigation","Third Party Advisory","US Government Resource"],"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-23-180-03"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mitigation","Third Party Advisory","US Government Resource"],"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-23-180-03"}],"sourceIdentifier":"ics-cert@hq.dhs.gov","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-256"}],"source":"ics-cert@hq.dhs.gov","type":"Secondary"},{"description":[{"lang":"en","value":"CWE-312"}],"source":"nvd@nist.gov","type":"Primary"}]}
|