CVE-2022-2825

criticalPriorität · verfolgen · 40EPSS 0.034 · 89. PerzentilEURUUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

3.40% (89th) EPSS

CVSS 9.8 · critical

Is it mine?

33 products

Prüfe deine Angriffsfläche

Who says so?

4 sources

cnnvd · enisa_euvd · fstec_bdu · cisa_csaf_ot

EPSS · bewertet 2026-10-27

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kepware KEPServerEX 6.11.718.0. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of text encoding conversions. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-18411.

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Noch kein Hersteller-Fix; eine Mitigation ist verfügbar.

MitigationGE Digital Industrial Gateway Servercisa_csaf_ot
OPC-Aggregator: should upgrade to v6.12 or later
MitigationKepware KEPServerEXcisa_csaf_ot
OPC-Aggregator: should upgrade to v6.12 or later
MitigationOPC-Aggregatorcisa_csaf_ot
OPC-Aggregator: should upgrade to v6.12 or later
MitigationRockwell Automation KEPServer Enterprisecisa_csaf_ot
OPC-Aggregator: should upgrade to v6.12 or later
MitigationSoftware Toolbox TOP Servercisa_csaf_ot
OPC-Aggregator: should upgrade to v6.12 or later
MitigationThingWorkx Industrial Connectivitycisa_csaf_ot
OPC-Aggregator: should upgrade to v6.12 or later
MitigationThingWorkx Kepware Edgecisa_csaf_ot
OPC-Aggregator: should upgrade to v6.12 or later
MitigationThingWorkx Kepware Servercisa_csaf_ot
OPC-Aggregator: should upgrade to v6.12 or later

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

9.8

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hprimary · NVD / NIST USAusnutzbarkeit 3.9 · Auswirkung 5.9

v3.09.8criticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · CISA US

v3.09.8criticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · zdi-disclosures@trendmicro.comAusnutzbarkeit 3.9 · Auswirkung 5.9

v3.19criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · ENISA EU

v3.19.1criticalAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:Hsecondary · FSTEC (BDU) RU

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HsecondaryAusnutzbarkeit 3.9 · Auswirkung 5.9

SSVC

Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.

Exploitation: none · Automatable: yes · Technical Impact: totalcoordinatorcisa_ssvcUS

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-121USCWE-121USCWE-121US

betroffene Produkte (33)

Betroffene Produkte und Versionsbereiche.

GE Digital Industrial Gateway Server: Versions prior to v7.612alle Versionencisa_csaf_otUS
Kepware KEPServerEX: Versions prior to 6.12alle Versionencisa_csaf_otUS
OPC-Aggregator: Versions prior to 6.12alle Versionencisa_csaf_otUS
Rockwell Automation KEPServer Enterprise: Versions prior to v6.12alle Versionencisa_csaf_otUS
Software Toolbox TOP Server: Versions prior to v6.12alle Versionencisa_csaf_otUS
ThingWorkx Industrial Connectivity: All versionsalle Versionencisa_csaf_otUS
ThingWorkx Kepware Edge: Versions 1.4 and prioralle Versionencisa_csaf_otUS
ThingWorkx Kepware Server: Versions prior to 6.12alle Versionencisa_csaf_otUS
PTC GE Digital Industrial Gateway Server< 7.612cisa_csaf_otUS
PTC Kepware KEPServerEX< 6.12cisa_csaf_otUS
PTC OPC-Aggregator< 6.12cisa_csaf_otUS
PTC Rockwell Automation KEPServer Enterprise< 6.12cisa_csaf_otUS
PTC Software Toolbox TOP Server< 6.12cisa_csaf_otUS
PTC ThingWorkx Industrial Connectivityalle Versionencisa_csaf_otUS
PTC ThingWorkx Kepware Edge≤ 1.4cisa_csaf_otUS
PTC ThingWorkx Kepware Server< 6.12cisa_csaf_otUS
Kepware KEPServerEX≤ 6.11.718.0enisa_euvdEU
General Electric Company Digital Industrial Gateway Server≤ 7.612fstec_bduRU
PTC Kepware KEPServerEX≤ 6.12fstec_bduRU
PTC OPC-Aggregator≤ 6.12fstec_bduRU

20 von 33 angezeigt

Advisories (1)

Hersteller- und Ökosystem-Meldungen dazu.

ICSA-22-242-10PTC Kepware KEPServerEX (Update A)2022-08-30icsa · cisa_csaf_otUS
Successful exploitation of these vulnerabilities could allow an attacker to crash the device or remotely execute arbitrary code.

auch bekannt als (5)

Weitere Namen und Kennungen dieser Entität.

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvd enisa_euvd fstec_bdu cisa_csaf_ot NVD CVE.org MITRE

veröffentlicht 2023-03-29geändert 2026-06-17

Referenzen (10)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan