Ovarro Update
1984Warning Date
Severity Level
Warning Number
Target Sector
26 September, 2021
● High
2021-3571
Manufacturing
Description:
Ovarro has released a security update to address several vulnerabilities in the following product:
- TBox
- TBoxLT2 (All models)
- TBox MS-CPU32
- TBox MS-CPU32-S2
- TBox RM2 (All models)
- TBox TG2 (All models)
- All versions prior to TWinSoft 12.4 and Firmware 1.46
Threats:
Attacker could exploit these vulnerabilities by doing the following:
- Command Injection
- Code execution
Best practice and Recommendations:
The CERT team encourages users to review Ovarro security advisory and update the affected product to 12.5 or later: