{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-04-23T08:51:31.571","vulnerabilities":[{"cve":{"id":"CVE-2023-36607","sourceIdentifier":"ics-cert@hq.dhs.gov","published":"2023-06-29T21:15:09.917","lastModified":"2024-11-21T08:10:03.440","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The affected TBox RTUs are missing authorization for running some API commands. An attacker running these commands could reveal sensitive information such as software versions and web server file contents.\n\n"}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}]},"weaknesses":[{"source":"ics-cert@hq.dhs.gov","type":"Secondary","description":[{"lang":"en","value":"CWE-862"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ovarro:tbox_ms-cpu32_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"1.50.598","matchCriteriaId":"72CE5CAF-635F-4B1E-9440-3F745BA4A8BC"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ovarro:tbox_ms-cpu32:-:*:*:*:*:*:*:*","matchCriteriaId":"0746C27E-6100-430A-8005-F71C8D24E827"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ovarro:tbox_ms-cpu32-s2_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"1.50.598","matchCriteriaId":"EC6FAD9F-D3BE-4E69-A2EE-D08494FC5866"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ovarro:tbox_ms-cpu32-s2:-:*:*:*:*:*:*:*","matchCriteriaId":"1753583A-93AC-4DBE-8E2C-A4816B8D1D11"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ovarro:tbox_lt2_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"1.50.598","matchCriteriaId":"659B7A35-F886-44E9-9E1B-550B50F3C0F5"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ovarro:tbox_lt2:-:*:*:*:*:*:*:*","matchCriteriaId":"AACB5343-6982-4BC9-8173-E62160DF4595"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ovarro:tbox_tg2_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"1.50.598","matchCriteriaId":"54A1620A-B664-4D8F-A34F-B6E07CC5BE33"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ovarro:tbox_tg2:-:*:*:*:*:*:*:*","matchCriteriaId":"551340E5-D721-40F1-8D14-CBF87A68BFB3"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ovarro:tbox_rm2_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"1.50.598","matchCriteriaId":"DD6F3E7D-E5E9-44E1-B066-5D6382C30D2E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ovarro:tbox_rm2:-:*:*:*:*:*:*:*","matchCriteriaId":"F73C576F-9BAB-4C8E-9B47-9C930B67C910"}]}]}],"references":[{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-23-180-03","source":"ics-cert@hq.dhs.gov","tags":["Mitigation","Third Party Advisory","US Government Resource"]},{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-23-180-03","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mitigation","Third Party Advisory","US Government Resource"]}]}}]}