PTC ThingWorx Edge
Successful exploitation of these vulnerabilities could allow an attacker to crash the device they accessed or could allow remote code execution.
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-0755US | critical9.8 | — | ||
The affected products are vulnerable to an improper validation of array index, which could allow an attacker to crash the server and remotely execute arbitrary code.
| ||||
| CVE-2023-0754US | critical9.8 | — | ||
The affected products are vulnerable to an integer
overflow or wraparound, which could allow an attacker to crash the server and remotely
execute arbitrary code.
| ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (36)
- Mitigation.NET-SDK
.NET-SDK: v5.8.5 or later.
- Mitigation.NET-SDK
.NET-SDK: v5.8.5 or later.
- MitigationGE Digital Industrial Gateway Server
.NET-SDK: v5.8.5 or later.
- MitigationGE Digital Industrial Gateway Server
.NET-SDK: v5.8.5 or later.
- MitigationKepware KEPServerEX
.NET-SDK: v5.8.5 or later.
- MitigationKepware KEPServerEX
.NET-SDK: v5.8.5 or later.
- MitigationRockwell Automation KEPServer Enterprise
.NET-SDK: v5.8.5 or later.
- MitigationRockwell Automation KEPServer Enterprise
.NET-SDK: v5.8.5 or later.
- MitigationThingWorx Edge C-SDK
.NET-SDK: v5.8.5 or later.
- MitigationThingWorx Edge C-SDK
.NET-SDK: v5.8.5 or later.
- MitigationThingWorx Edge MicroServer (EMS)
.NET-SDK: v5.8.5 or later.
- MitigationThingWorx Edge MicroServer (EMS)
.NET-SDK: v5.8.5 or later.
- MitigationThingWorx Industrial Connectivity
.NET-SDK: v5.8.5 or later.
- MitigationThingWorx Industrial Connectivity
.NET-SDK: v5.8.5 or later.
- MitigationThingWorx Kepware Edge
.NET-SDK: v5.8.5 or later.
- MitigationThingWorx Kepware Edge
.NET-SDK: v5.8.5 or later.
- MitigationThingWorx Kepware Server (formerly ThingWorx Industrial Connectivity)
.NET-SDK: v5.8.5 or later.
- MitigationThingWorx Kepware Server (formerly ThingWorx Industrial Connectivity)
.NET-SDK: v5.8.5 or later.
- Behoben.NET-SDK
GE Digital Industrial Gateway Server: v7.613 or later.
- Behoben.NET-SDK
GE Digital Industrial Gateway Server: v7.613 or later.
- BehobenGE Digital Industrial Gateway Server
GE Digital Industrial Gateway Server: v7.613 or later.
- BehobenGE Digital Industrial Gateway Server
GE Digital Industrial Gateway Server: v7.613 or later.
- BehobenKepware KEPServerEX
GE Digital Industrial Gateway Server: v7.613 or later.
- BehobenKepware KEPServerEX
GE Digital Industrial Gateway Server: v7.613 or later.
- BehobenRockwell Automation KEPServer Enterprise
GE Digital Industrial Gateway Server: v7.613 or later.
- BehobenRockwell Automation KEPServer Enterprise
GE Digital Industrial Gateway Server: v7.613 or later.
- BehobenThingWorx Edge C-SDK
GE Digital Industrial Gateway Server: v7.613 or later.
- BehobenThingWorx Edge C-SDK
GE Digital Industrial Gateway Server: v7.613 or later.
- BehobenThingWorx Edge MicroServer (EMS)
GE Digital Industrial Gateway Server: v7.613 or later.
- BehobenThingWorx Edge MicroServer (EMS)
GE Digital Industrial Gateway Server: v7.613 or later.
- BehobenThingWorx Industrial Connectivity
GE Digital Industrial Gateway Server: v7.613 or later.
- BehobenThingWorx Industrial Connectivity
GE Digital Industrial Gateway Server: v7.613 or later.
- BehobenThingWorx Kepware Edge
GE Digital Industrial Gateway Server: v7.613 or later.
- BehobenThingWorx Kepware Edge
GE Digital Industrial Gateway Server: v7.613 or later.
- BehobenThingWorx Kepware Server (formerly ThingWorx Industrial Connectivity)
GE Digital Industrial Gateway Server: v7.613 or later.
- BehobenThingWorx Kepware Server (formerly ThingWorx Industrial Connectivity)
GE Digital Industrial Gateway Server: v7.613 or later.
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan