CVE-2021-22648

—

CVSS 3.1

9.8 critical

EPSS

<1%p56

Published

Jul 28, 2022 (Jul 28, 2022)

Modified

Jun 17, 2026

Description

Ovarro TBox proprietary Modbus file access functions allow attackers to read, alter, or delete the configuration file.

Vendors: ovarro
Products: twinsoft, tbox lt2-530 firmware, tbox lt2-532 firmware, tbox lt2-540 firmware, tbox ms-cpu32 firmware, tbox ms-cpu32-s2 firmware, tbox rm2 firmware, tbox tg2 firmware
Weakness: CWE-732
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

In the news1 stories