{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-05-06T11:15:53.850","vulnerabilities":[{"cve":{"id":"CVE-2023-36609","sourceIdentifier":"ics-cert@hq.dhs.gov","published":"2023-07-03T20:15:09.537","lastModified":"2024-11-21T08:10:03.853","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"\nThe affected TBox RTUs run OpenVPN with root privileges and can run user defined configuration scripts. An attacker could set up a local OpenVPN server and push a malicious script onto the TBox host to acquire root privileges.\n\n"}],"metrics":{"cvssMetricV31":[{"source":"ics-cert@hq.dhs.gov","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9}]},"weaknesses":[{"source":"ics-cert@hq.dhs.gov","type":"Secondary","description":[{"lang":"en","value":"CWE-829"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-829"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ovarro:tbox_ms-cpu32_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"1.50.598","matchCriteriaId":"72CE5CAF-635F-4B1E-9440-3F745BA4A8BC"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ovarro:tbox_ms-cpu32:-:*:*:*:*:*:*:*","matchCriteriaId":"0746C27E-6100-430A-8005-F71C8D24E827"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ovarro:tbox_ms-cpu32-s2_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"1.50.598","matchCriteriaId":"EC6FAD9F-D3BE-4E69-A2EE-D08494FC5866"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ovarro:tbox_ms-cpu32-s2:-:*:*:*:*:*:*:*","matchCriteriaId":"1753583A-93AC-4DBE-8E2C-A4816B8D1D11"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ovarro:tbox_lt2_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"1.50.598","matchCriteriaId":"659B7A35-F886-44E9-9E1B-550B50F3C0F5"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ovarro:tbox_lt2:-:*:*:*:*:*:*:*","matchCriteriaId":"AACB5343-6982-4BC9-8173-E62160DF4595"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ovarro:tbox_tg2_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"1.50.598","matchCriteriaId":"54A1620A-B664-4D8F-A34F-B6E07CC5BE33"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ovarro:tbox_tg2:-:*:*:*:*:*:*:*","matchCriteriaId":"551340E5-D721-40F1-8D14-CBF87A68BFB3"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ovarro:tbox_rm2_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"1.50.598","matchCriteriaId":"DD6F3E7D-E5E9-44E1-B066-5D6382C30D2E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ovarro:tbox_rm2:-:*:*:*:*:*:*:*","matchCriteriaId":"F73C576F-9BAB-4C8E-9B47-9C930B67C910"}]}]}],"references":[{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-23-180-03","source":"ics-cert@hq.dhs.gov","tags":["Mitigation","Third Party Advisory","US Government Resource"]},{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-23-180-03","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mitigation","Third Party Advisory","US Government Resource"]}]}}]}