PTC KEPServerEx
Successful exploitation of these vulnerabilities could allow an attacker gaining Windows SYSTEM-level code execution on the service host and may cause the product to crash, leak sensitive information, or connect to the product without proper authentication.
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-5909US | high7.5 | — | ||
KEPServerEX does not properly validate certificates from clients which may allow unauthenticated users to connect.
| ||||
| CVE-2023-5908US | critical9.1 | — | ||
KEPServerEX is vulnerable to a buffer overflow which may allow an attacker to crash the product being accessed or leak information.
| ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSA-23-334-03 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-23-334-03 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (26)
- MitigationGE Digital Industrial Gateway Server
PTC has released and recommends users to update to the following versions:
- MitigationGE Digital Industrial Gateway Server
PTC has released and recommends users to update to the following versions:
- MitigationKEPServerEX
PTC has released and recommends users to update to the following versions:
- MitigationKEPServerEX
PTC has released and recommends users to update to the following versions:
- MitigationOPC-Aggregator
PTC has released and recommends users to update to the following versions:
- MitigationOPC-Aggregator
PTC has released and recommends users to update to the following versions:
- MitigationRockwell Automation KEPServer Enterprise
PTC has released and recommends users to update to the following versions:
- MitigationRockwell Automation KEPServer Enterprise
PTC has released and recommends users to update to the following versions:
- MitigationSoftware Toolbox TOP Server
PTC has released and recommends users to update to the following versions:
- MitigationSoftware Toolbox TOP Server
PTC has released and recommends users to update to the following versions:
- MitigationThingWorx Industrial Connectivity
PTC has released and recommends users to update to the following versions:
- MitigationThingWorx Industrial Connectivity
PTC has released and recommends users to update to the following versions:
- MitigationThingWorx Kepware Edge
PTC has released and recommends users to update to the following versions:
- MitigationThingWorx Kepware Edge
PTC has released and recommends users to update to the following versions:
- MitigationThingWorx Kepware Server
PTC has released and recommends users to update to the following versions:
- MitigationThingWorx Kepware Server
PTC has released and recommends users to update to the following versions:
- BehobenKEPServerEX
KEPServerEX should upgrade to v6.15 or later
- BehobenKEPServerEX
KEPServerEX should upgrade to v6.15 or later
- BehobenOPC-Aggregator
OPC-Aggregator should upgrade to v6.15 or later
- BehobenOPC-Aggregator
OPC-Aggregator should upgrade to v6.15 or later
- BehobenThingWorx Industrial Connectivity
ThingWorx Industrial Connectivity should upgrade to ThingWorx Kepware Server v6.15 or later
- BehobenThingWorx Industrial Connectivity
ThingWorx Industrial Connectivity should upgrade to ThingWorx Kepware Server v6.15 or later
- BehobenThingWorx Kepware Edge
ThingWorx Kepware Edge: Upgrade to v1.8 or later
- BehobenThingWorx Kepware Edge
ThingWorx Kepware Edge: Upgrade to v1.8 or later
- BehobenThingWorx Kepware Server
ThingWorx Industrial Connectivity should upgrade to ThingWorx Kepware Server v6.15 or later
- BehobenThingWorx Kepware Server
ThingWorx Industrial Connectivity should upgrade to ThingWorx Kepware Server v6.15 or later
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan