PTC Kepware KEPServerEX (Update A)
Successful exploitation of these vulnerabilities could allow an attacker to crash the device or remotely execute arbitrary code.
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2022-2848US | critical9.1 | — | ||
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kepware KEPServerEX 6.11.718.0. Authentication is not required to exploit this vul… | ||||
| CVE-2022-2825US | critical9.8 | — | ||
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kepware KEPServerEX 6.11.718.0. Authentication is not required to exploit this vul… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSA-22-242-10 JSONself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (16)
- MitigationGE Digital Industrial Gateway Server
OPC-Aggregator: should upgrade to v6.12 or later
- MitigationGE Digital Industrial Gateway Server
OPC-Aggregator: should upgrade to v6.12 or later
- MitigationKepware KEPServerEX
OPC-Aggregator: should upgrade to v6.12 or later
- MitigationKepware KEPServerEX
OPC-Aggregator: should upgrade to v6.12 or later
- MitigationOPC-Aggregator
OPC-Aggregator: should upgrade to v6.12 or later
- MitigationOPC-Aggregator
OPC-Aggregator: should upgrade to v6.12 or later
- MitigationRockwell Automation KEPServer Enterprise
OPC-Aggregator: should upgrade to v6.12 or later
- MitigationRockwell Automation KEPServer Enterprise
OPC-Aggregator: should upgrade to v6.12 or later
- MitigationSoftware Toolbox TOP Server
OPC-Aggregator: should upgrade to v6.12 or later
- MitigationSoftware Toolbox TOP Server
OPC-Aggregator: should upgrade to v6.12 or later
- MitigationThingWorkx Industrial Connectivity
OPC-Aggregator: should upgrade to v6.12 or later
- MitigationThingWorkx Industrial Connectivity
OPC-Aggregator: should upgrade to v6.12 or later
- MitigationThingWorkx Kepware Edge
OPC-Aggregator: should upgrade to v6.12 or later
- MitigationThingWorkx Kepware Edge
OPC-Aggregator: should upgrade to v6.12 or later
- MitigationThingWorkx Kepware Server
OPC-Aggregator: should upgrade to v6.12 or later
- MitigationThingWorkx Kepware Server
OPC-Aggregator: should upgrade to v6.12 or later
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan