CVE-2023-36609

HIGH · CVSS 7.2 EPSS 0.70%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2023-07-03 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2023-36609

Severity

HIGH

CVSS

7.2

EPSS

0.70%

Original NVD Description

The affected TBox RTUs run OpenVPN with root privileges and can run user defined configuration scripts. An attacker could set up a local OpenVPN server and push a malicious script onto the TBox host to acquire root privileges.