Riskcovery

CVE-2023-5908

Heap Based Buffer Overflow in PTC KEPServerEx

State
Published
Severity
9.1 Critical
Published
Nov 30, 2023
Updated
Aug 2, 2024
Reserved
Nov 1, 2023

Read the record on cve.org

Description

KEPServerEX is vulnerable to a buffer overflow which may allow an attacker to crash the product being accessed or leak information.

Scores

CVSSScoreVectorSource
3.19.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:Hicscert

Weaknesses

Affected Products

ProductVersions
KEPServerEXPTC
  • 6.14.263.0 and earlierAffected
ThingWorx Kepware ServerPTC
  • 6.14.263.0 and earlierAffected
ThingWorx Industrial ConnectivityPTC
  • All versionsAffected
OPC-AggregatorPTC
  • 6.14 and earlierAffected
ThingWorx Kepware EdgePTC
  • 1.7 and earlierAffected
KEPServer EnterpriseRockwell Automation
  • 6.14.263.0 and earlierAffected
Industrial Gateway ServerGE Gigital
  • 7.614 and earlierAffected
TOP ServerSoftware Toolbox
  • 6.14.263.0 and earlierAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.