CVE-2023-36608: Ovarro Tbox LT2 Firmware

Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days.

The affected TBox RTUs store hashed passwords using MD5 encryption, which is an insecure encryption algorithm.

Affected products

• Ovarro Tbox LT2 Firmware: from 1.46, up to and including 1.50.598
• Ovarro Tbox Ms-CPU32-s2 Firmware: from 1.46, up to and including 1.50.598
• Ovarro Tbox Ms-CPU32 Firmware: from 1.46, up to and including 1.50.598
• Ovarro Tbox RM2 Firmware: from 1.46, up to and including 1.50.598
• Ovarro Tbox TG2 Firmware: from 1.46, up to and including 1.50.598

Published 2023-07-03. Last modified 2026-06-17.