{"id":"CVE-2023-36609","aliases":["EUVD-2023-40554","GHSA-7cxv-6x8v-9gmq"],"status":"published","title":"The affected TBox RTUs run OpenVPN with root privileges and can run user defined configuration...","description":"The affected TBox RTUs run OpenVPN with root privileges and can run user defined configuration scripts. An attacker could set up a local OpenVPN server and push a malicious script onto the TBox host to acquire root privileges.","severity":{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00698,"percentile":0.53361,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-829"],"published":"2023-07-03T19:59:08Z","modified":"2026-06-17T06:06:39Z","products":[{"vendor":"ovarro","product":"tbox lt2"},{"vendor":"ovarro","product":"tbox ms-cpu32"},{"vendor":"ovarro","product":"tbox rm2"},{"vendor":"ovarro","product":"tbox tg2"},{"vendor":"ovarro","product":"tbox_lt2"},{"vendor":"ovarro","product":"tbox_lt2_firmware"},{"vendor":"ovarro","product":"tbox_ms-cpu32"},{"vendor":"ovarro","product":"tbox_ms-cpu32-s2"},{"vendor":"ovarro","product":"tbox_ms-cpu32-s2_firmware"},{"vendor":"ovarro","product":"tbox_ms-cpu32_firmware"},{"vendor":"ovarro","product":"tbox_rm2"},{"vendor":"ovarro","product":"tbox_rm2_firmware"},{"vendor":"ovarro","product":"tbox_tg2"},{"vendor":"ovarro","product":"tbox_tg2_firmware"},{"vendor":"ovarro","product":"​tbox ms-cpu32-s2"}],"references":[{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-23-180-03","tags":["government-resource","x_transferred","Mitigation","Third Party Advisory","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-36609"},{"url":"https://github.com/advisories/GHSA-7cxv-6x8v-9gmq"}],"sources":{"cve":[{"id":"CVE-2023-36609","description":"\nThe affected TBox RTUs run OpenVPN with root privileges and can run user defined configuration scripts. An attacker could set up a local OpenVPN server and push a malicious script onto the TBox host to acquire root privileges.\n\n","status":"published","published":"2023-07-03T19:59:08.547Z","modified":"2024-11-25T18:11:48.466Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-829"],"updated_at":"2026-11-02T14:35:27.810438Z"}],"euvd":[{"id":"EUVD-2023-40554","description":"\nThe affected TBox RTUs run OpenVPN with root privileges and can run user defined configuration scripts. An attacker could set up a local OpenVPN server and push a malicious script onto the TBox host to acquire root privileges.\n\n","status":"published","published":"2023-07-03T19:59:08Z","modified":"2024-11-25T18:11:48Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T00:04:48.805983Z"}],"ghsa":[{"id":"GHSA-7cxv-6x8v-9gmq","title":"\nThe affected TBox RTUs run OpenVPN with root privileges and can run user defined configuration...","description":"\nThe affected TBox RTUs run OpenVPN with root privileges and can run user defined configuration scripts. An attacker could set up a local OpenVPN server and push a malicious script onto the TBox host to acquire root privileges.\n\n","status":"published","published":"2023-07-03T21:30:57Z","modified":"2024-04-04T05:20:41Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-829"],"updated_at":"2026-11-02T14:56:31.684074Z"}],"nvd":[{"id":"CVE-2023-36609","description":"\nThe affected TBox RTUs run OpenVPN with root privileges and can run user defined configuration scripts. An attacker could set up a local OpenVPN server and push a malicious script onto the TBox host to acquire root privileges.\n\n","status":"published","published":"2023-07-03T20:15:09.537Z","modified":"2026-06-17T06:06:39.89Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-829"],"updated_at":"2026-11-02T14:08:14.715708Z"}]}}