ICSA-20-352-02

icsaUScisa_csaf_ot

PTC Kepware KEPServerEX (Update A)

view advisory published 2020-12-17

Successful exploitation of these vulnerabilities could lead to a server crashing, a denial-of-service condition, data leakage, or remote code execution.

01

describes (3)

Related CVEs.

IDseverity exploitable
CVE-2020-27267UScritical9.1—
KEPServerEX v6.0 to v6.9, ThingWorx Kepware Server v6.8 and v6.9, ThingWorx Industrial Connectivity (all versions), OPC-Aggregator (all versions), Rockwell Automation KEPServer Ent…
CVE-2020-27265UScritical9.8—
KEPServerEX: v6.0 to v6.9, ThingWorx Kepware Server: v6.8 and v6.9, ThingWorx Industrial Connectivity: All versions, OPC-Aggregator: All versions, Rockwell Automation KEPServer Ent…
CVE-2020-27263UScritical9.1—
KEPServerEX: v6.0 to v6.9, ThingWorx Kepware Server: v6.8 and v6.9, ThingWorx Industrial Connectivity: All versions, OPC-Aggregator: All versions, Rockwell Automation KEPServer Ent…
02

references

External citations — patches, advisories, analysis.

03

remediations (42)

  • MitigationGE Digital Industrial Gateway Server

    PTC has released updates for the following products and recommends that users upgrade to the most current supported version:

  • MitigationGE Digital Industrial Gateway Server

    PTC has released updates for the following products and recommends that users upgrade to the most current supported version:

  • MitigationGE Digital Industrial Gateway Server

    PTC has released updates for the following products and recommends that users upgrade to the most current supported version:

  • MitigationKEPServerEX

    PTC has released updates for the following products and recommends that users upgrade to the most current supported version:

  • MitigationKEPServerEX

    PTC has released updates for the following products and recommends that users upgrade to the most current supported version:

  • MitigationKEPServerEX

    PTC has released updates for the following products and recommends that users upgrade to the most current supported version:

  • MitigationOPC-Aggregator

    PTC has released updates for the following products and recommends that users upgrade to the most current supported version:

  • MitigationOPC-Aggregator

    PTC has released updates for the following products and recommends that users upgrade to the most current supported version:

  • MitigationOPC-Aggregator

    PTC has released updates for the following products and recommends that users upgrade to the most current supported version:

  • MitigationRockwell Automation KEPServer Enterprise

    PTC has released updates for the following products and recommends that users upgrade to the most current supported version:

  • MitigationRockwell Automation KEPServer Enterprise

    PTC has released updates for the following products and recommends that users upgrade to the most current supported version:

  • MitigationRockwell Automation KEPServer Enterprise

    PTC has released updates for the following products and recommends that users upgrade to the most current supported version:

  • MitigationSoftware Toolbox TOP Server

    PTC has released updates for the following products and recommends that users upgrade to the most current supported version:

  • MitigationSoftware Toolbox TOP Server

    PTC has released updates for the following products and recommends that users upgrade to the most current supported version:

  • MitigationSoftware Toolbox TOP Server

    PTC has released updates for the following products and recommends that users upgrade to the most current supported version:

  • MitigationThingWorx Industrial Connectivity

    PTC has released updates for the following products and recommends that users upgrade to the most current supported version:

  • MitigationThingWorx Industrial Connectivity

    PTC has released updates for the following products and recommends that users upgrade to the most current supported version:

  • MitigationThingWorx Industrial Connectivity

    PTC has released updates for the following products and recommends that users upgrade to the most current supported version:

  • MitigationThingWorx Kepware Server

    PTC has released updates for the following products and recommends that users upgrade to the most current supported version:

  • MitigationThingWorx Kepware Server

    PTC has released updates for the following products and recommends that users upgrade to the most current supported version:

  • MitigationThingWorx Kepware Server

    PTC has released updates for the following products and recommends that users upgrade to the most current supported version:

  • FixedGE Digital Industrial Gateway Server

    OPC-Aggregator Version 6.9 should upgrade to Version 6.9.584.0

    https://support.ptc.com/
  • FixedGE Digital Industrial Gateway Server

    OPC-Aggregator Version 6.9 should upgrade to Version 6.9.584.0

    https://support.ptc.com/
  • FixedGE Digital Industrial Gateway Server

    OPC-Aggregator Version 6.9 should upgrade to Version 6.9.584.0

    https://support.ptc.com/
  • FixedKEPServerEX

    OPC-Aggregator Version 6.9 should upgrade to Version 6.9.584.0

    https://support.ptc.com/
  • FixedKEPServerEX

    OPC-Aggregator Version 6.9 should upgrade to Version 6.9.584.0

    https://support.ptc.com/
  • FixedKEPServerEX

    OPC-Aggregator Version 6.9 should upgrade to Version 6.9.584.0

    https://support.ptc.com/
  • FixedOPC-Aggregator

    OPC-Aggregator Version 6.9 should upgrade to Version 6.9.584.0

    https://support.ptc.com/
  • FixedOPC-Aggregator

    OPC-Aggregator Version 6.9 should upgrade to Version 6.9.584.0

    https://support.ptc.com/
  • FixedOPC-Aggregator

    OPC-Aggregator Version 6.9 should upgrade to Version 6.9.584.0

    https://support.ptc.com/
  • FixedRockwell Automation KEPServer Enterprise

    OPC-Aggregator Version 6.9 should upgrade to Version 6.9.584.0

    https://support.ptc.com/
  • FixedRockwell Automation KEPServer Enterprise

    OPC-Aggregator Version 6.9 should upgrade to Version 6.9.584.0

    https://support.ptc.com/
  • FixedRockwell Automation KEPServer Enterprise

    OPC-Aggregator Version 6.9 should upgrade to Version 6.9.584.0

    https://support.ptc.com/
  • FixedSoftware Toolbox TOP Server

    OPC-Aggregator Version 6.9 should upgrade to Version 6.9.584.0

    https://support.ptc.com/
  • FixedSoftware Toolbox TOP Server

    OPC-Aggregator Version 6.9 should upgrade to Version 6.9.584.0

    https://support.ptc.com/
  • FixedSoftware Toolbox TOP Server

    OPC-Aggregator Version 6.9 should upgrade to Version 6.9.584.0

    https://support.ptc.com/
  • FixedThingWorx Industrial Connectivity

    OPC-Aggregator Version 6.9 should upgrade to Version 6.9.584.0

    https://support.ptc.com/
  • FixedThingWorx Industrial Connectivity

    OPC-Aggregator Version 6.9 should upgrade to Version 6.9.584.0

    https://support.ptc.com/
  • FixedThingWorx Industrial Connectivity

    OPC-Aggregator Version 6.9 should upgrade to Version 6.9.584.0

    https://support.ptc.com/
  • FixedThingWorx Kepware Server

    OPC-Aggregator Version 6.9 should upgrade to Version 6.9.584.0

    https://support.ptc.com/
  • FixedThingWorx Kepware Server

    OPC-Aggregator Version 6.9 should upgrade to Version 6.9.584.0

    https://support.ptc.com/
  • FixedThingWorx Kepware Server

    OPC-Aggregator Version 6.9 should upgrade to Version 6.9.584.0

    https://support.ptc.com/
scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan