CVE-2021-22642

An attacker could use specially crafted invalid Modbus frames to crash the Ovarro TBox system.
References
Link Resource
https://www.cisa.gov/uscert/ics/advisories/icsa-21-054-04 Third Party Advisory US Government Resource
Configurations

Configuration 1 (hide)

cpe:2.3:a:ovarro:twinsoft:*:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:ovarro:tbox_lt2-530_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:ovarro:tbox_lt2-530:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:ovarro:tbox_lt2-532_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:ovarro:tbox_lt2-532:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:ovarro:tbox_lt2-540_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:ovarro:tbox_lt2-540:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:ovarro:tbox_ms-cpu32_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:ovarro:tbox_ms-cpu32:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:ovarro:tbox_ms-cpu32-s2_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:ovarro:tbox_ms-cpu32-s2:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:o:ovarro:tbox_rm2_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:ovarro:tbox_rm2:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
cpe:2.3:o:ovarro:tbox_tg2_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:ovarro:tbox_tg2:-:*:*:*:*:*:*:*

History

No history.

Information

Published : 2022-07-28 15:15

Updated : 2024-02-28 19:29


NVD link : CVE-2021-22642

Mitre link : CVE-2021-22642

CVE.ORG link : CVE-2021-22642


JSON object : View

Products Affected

ovarro

  • tbox_ms-cpu32_firmware
  • tbox_ms-cpu32-s2
  • tbox_lt2-540
  • tbox_lt2-530
  • tbox_lt2-540_firmware
  • tbox_tg2
  • twinsoft
  • tbox_lt2-532
  • tbox_ms-cpu32-s2_firmware
  • tbox_tg2_firmware
  • tbox_ms-cpu32
  • tbox_lt2-532_firmware
  • tbox_rm2_firmware
  • tbox_lt2-530_firmware
  • tbox_rm2
CWE
CWE-400

Uncontrolled Resource Consumption