PTC KEPServerEx
Successful exploitation of these vulnerabilities could allow an attacker gaining Windows SYSTEM-level code execution on the service host and may cause the product to crash, leak sensitive information, or connect to the product without proper authentication.
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-5909US | high7.5 | — | ||
KEPServerEX does not properly validate certificates from clients which may allow unauthenticated users to connect.
| ||||
| CVE-2023-5908US | critical9.1 | — | ||
KEPServerEX is vulnerable to a buffer overflow which may allow an attacker to crash the product being accessed or leak information.
| ||||
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-23-334-03 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-23-334-03 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (26)
- MitigationGE Digital Industrial Gateway Server
PTC has released and recommends users to update to the following versions:
- MitigationGE Digital Industrial Gateway Server
PTC has released and recommends users to update to the following versions:
- MitigationKEPServerEX
PTC has released and recommends users to update to the following versions:
- MitigationKEPServerEX
PTC has released and recommends users to update to the following versions:
- MitigationOPC-Aggregator
PTC has released and recommends users to update to the following versions:
- MitigationOPC-Aggregator
PTC has released and recommends users to update to the following versions:
- MitigationRockwell Automation KEPServer Enterprise
PTC has released and recommends users to update to the following versions:
- MitigationRockwell Automation KEPServer Enterprise
PTC has released and recommends users to update to the following versions:
- MitigationSoftware Toolbox TOP Server
PTC has released and recommends users to update to the following versions:
- MitigationSoftware Toolbox TOP Server
PTC has released and recommends users to update to the following versions:
- MitigationThingWorx Industrial Connectivity
PTC has released and recommends users to update to the following versions:
- MitigationThingWorx Industrial Connectivity
PTC has released and recommends users to update to the following versions:
- MitigationThingWorx Kepware Edge
PTC has released and recommends users to update to the following versions:
- MitigationThingWorx Kepware Edge
PTC has released and recommends users to update to the following versions:
- MitigationThingWorx Kepware Server
PTC has released and recommends users to update to the following versions:
- MitigationThingWorx Kepware Server
PTC has released and recommends users to update to the following versions:
- FixedKEPServerEX
KEPServerEX should upgrade to v6.15 or later
- FixedKEPServerEX
KEPServerEX should upgrade to v6.15 or later
- FixedOPC-Aggregator
OPC-Aggregator should upgrade to v6.15 or later
- FixedOPC-Aggregator
OPC-Aggregator should upgrade to v6.15 or later
- FixedThingWorx Industrial Connectivity
ThingWorx Industrial Connectivity should upgrade to ThingWorx Kepware Server v6.15 or later
- FixedThingWorx Industrial Connectivity
ThingWorx Industrial Connectivity should upgrade to ThingWorx Kepware Server v6.15 or later
- FixedThingWorx Kepware Edge
ThingWorx Kepware Edge: Upgrade to v1.8 or later
- FixedThingWorx Kepware Edge
ThingWorx Kepware Edge: Upgrade to v1.8 or later
- FixedThingWorx Kepware Server
ThingWorx Industrial Connectivity should upgrade to ThingWorx Kepware Server v6.15 or later
- FixedThingWorx Kepware Server
ThingWorx Industrial Connectivity should upgrade to ThingWorx Kepware Server v6.15 or later
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan