CVE-2021-22642: Ovarro Tbox LT2-530 Firmware

High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days.

An attacker could use specially crafted invalid Modbus frames to crash the Ovarro TBox system.

Affected products

• Ovarro Tbox LT2-530 Firmware: before 1.46 (fixed in 1.46)
• Ovarro Tbox LT2-532 Firmware: before 1.46 (fixed in 1.46)
• Ovarro Tbox LT2-540 Firmware: before 1.46 (fixed in 1.46)
• Ovarro Tbox Ms-CPU32-s2 Firmware: before 1.46 (fixed in 1.46)
• Ovarro Tbox Ms-CPU32 Firmware: before 1.46 (fixed in 1.46)
• Ovarro Tbox RM2 Firmware: before 1.46 (fixed in 1.46)
• Ovarro Tbox TG2 Firmware: before 1.46 (fixed in 1.46)
• Ovarro Twinsoft: before 12.4 (fixed in 12.4)

Published 2022-07-28. Last modified 2026-06-17.