CVE Feed

    Dashboard / CVE / CVE-2021-22646

    CVE-2021-22646

    The “ipk” package containing the configuration created by TWinSoft can be uploaded, extracted, and executed in Ovarro TBox, allowing malicious code execution.

    Published:Jul 28, 2022
    Last Modified:Apr 17, 2025
    EPS:Jul 28, 2022
    EPSS Score:0.00943
    CVSS Score:8.8

    Affected Products

    Vendor
    Ovarro
    Product
    Tbox Lt2-530
    Vendor
    Ovarro
    Product
    Tbox Lt2-530 Firmware
    Vendor
    Ovarro
    Product
    Tbox Lt2-532
    Vendor
    Ovarro
    Product
    Tbox Lt2-532 Firmware
    Vendor
    Ovarro
    Product
    Tbox Lt2-540
    Vendor
    Ovarro
    Product
    Tbox Lt2-540 Firmware
    Vendor
    Ovarro
    Product
    Tbox Ms-cpu32
    Vendor
    Ovarro
    Product
    Tbox Ms-cpu32-s2
    Vendor
    Ovarro
    Product
    Tbox Ms-cpu32-s2 Firmware
    Vendor
    Ovarro
    Product
    Tbox Ms-cpu32 Firmware
    Vendor
    Ovarro
    Product
    Tbox Rm2
    Vendor
    Ovarro
    Product
    Tbox Rm2 Firmware
    Vendor
    Ovarro
    Product
    Tbox Tg2
    Vendor
    Ovarro
    Product
    Tbox Tg2 Firmware
    Vendor
    Ovarro
    Product
    Twinsoft

    Exploits

    No exploit reference

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High