An attacker can decrypt the Ovarro TBox login password by communication capture and brute force attacks.CreditsUri Katz of Claroty reported these vulnerabilities to CISA.Referenceshttps://www.cisa.gov/uscert/ics/advisories/icsa-21-054-04
