CVE-2023-36610CWE-331

​The affected TBox RTUs generate software security tokens using insufficient entropy

Medium · published July 3, 2023

CVSS v3.1
5.9
EPSS
1%
Percentile
42.7
In the wild
Unconfirmed
What it is

​The affected TBox RTUs generate software security tokens using insufficient entropy. The random seed used to generate the software tokens is not initialized correctly, and other parts of the token are generated using predictable time-based values. An attacker with this knowledge could successfully brute force the token and authenticate themselves.

The record
Technical detail
CVSS v3.1
5.9 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00511 · 42.7th percentile
Weakness
CWE-331 · Insufficient Entropy
Published
2023-07-03T20:01Z
EPSS history
Timeline
  • 03 JUL 20:01Z
    ​The affected TBox RTUs generate software security tokens using insufficient entropy
    cvelistv5