An attacker may use TWinSoft and a malicious source project file (TPG) to extract files on machine executing Ovarro TWinSoft, which could lead to code execution.
An attacker may use TWinSoft and a malicious source project file (TPG) to extract files on machine executing Ovarro TWinSoft, which could lead to code execution.
Ovarro recommends affected users update to 12.5 or later of TWinSoft to mitigate these vulnerabilities.
The latest version can be found on www.ovarro.com in the customer support section (service portal).
Configurations
Workarounds
Exploits
Credits
Uri Katz of Claroty reported these vulnerabilities to CISA.
An attacker may use TWinSoft and a malicious source project file (TPG) to extract files on machine executing Ovarro TWinSoft, which could lead to code execution.