Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

ptc thingworx kepware server vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2023-29445
An uncontrolled search path element vulnerability (DLL hijacking) has been discovered that could allow a locally authenticated adversary to escalate privileges to SYSTEM.
Ptc Kepware KepserverexPtc Thingworx Kepware ServerPtc Thingworx Industrial Connectivity
NA
CVE-2023-29446
An improper input validation vulnerability has been discovered that could allow an adversary to inject a UNC path via a malicious project file. This allows an adversary to capture NLTMv2 hashes and potentially crack them offline.
Ptc Kepware KepserverexPtc Thingworx Kepware ServerPtc Thingworx Industrial Connectivity
NA
CVE-2023-29447
An insufficiently protected credentials vulnerability in KEPServerEX could allow an adversary to capture user credentials as the web server uses basic authentication.
Ptc Kepware KepserverexPtc Thingworx Kepware ServerPtc Thingworx Industrial Connectivity
NA
CVE-2023-29444
An uncontrolled search path element vulnerability (DLL hijacking) has been discovered that could allow a locally authenticated adversary to escalate privileges to SYSTEM. Alternatively, they could host a trojanized version of the software and trick victims into downloading and in...
Ptc Kepware KepserverexPtc Thingworx Kepware ServerPtc Thingworx Industrial Connectivity
NA
CVE-2023-5908
KEPServerEX is vulnerable to a buffer overflow which may allow an malicious user to crash the product being accessed or leak information.
Ptc Thingworx Industrial Connectivity -Softwaretoolbox Top ServerGe Industrial Gateway ServerRockwellautomation Kepserver EnterprisePtc Thingworx Kepware EdgePtc Opc-aggregatorPtc Thingworx Kepware ServerPtc Keepserverex
NA
CVE-2023-5909
KEPServerEX does not properly validate certificates from clients which may allow unauthenticated users to connect.
Ptc Thingworx Industrial Connectivity -Softwaretoolbox Top ServerGe Industrial Gateway ServerRockwellautomation Kepserver EnterprisePtc Thingworx Kepware EdgePtc Opc-aggregatorPtc Thingworx Kepware ServerPtc Keepserverex
NA
CVE-2022-2825
This vulnerability allows remote malicious users to execute arbitrary code on affected installations of Kepware KEPServerEX 6.11.718.0. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of text encoding conversions. The iss...
Ptc Thingworx Industrial Connectivity -Ptc Thingworx Kepware EdgePtc Opc-aggregatorPtc Kepware KepserverexSoftwaretoolbox Top ServerRockwellautomation Kepserver EnterprisePtc Thingworx Kepware ServerGe Industrial Gateway Server
NA
CVE-2022-2848
This vulnerability allows remote malicious users to execute arbitrary code on affected installations of Kepware KEPServerEX 6.11.718.0. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of text encoding conversions. The iss...
Ptc Thingworx Industrial Connectivity -Ptc Thingworx Kepware EdgePtc Opc-aggregatorPtc Kepware KepserverexSoftwaretoolbox Top ServerRockwellautomation Kepserver EnterprisePtc Thingworx Kepware ServerGe Industrial Gateway Server
NA
CVE-2023-0755
The affected products are vulnerable to an improper validation of array index, which could allow an malicious user to crash the server and remotely execute arbitrary code.
Ptc Thingworx Industrial Connectivity -Rockwellautomation Kepserver EnterprisePtc Thingworx Kepware EdgePtc Thingworx .net-sdkPtc Thingworx Edge C-sdkPtc Thingworx Edge MicroserverPtc Kepware ServerexGe Digital Industrial Gateway ServerPtc Kepware Server
NA
CVE-2023-0754
The affected products are vulnerable to an integer overflow or wraparound, which could allow an malicious user to crash the server and remotely execute arbitrary code.
Rockwellautomation Kepserver EnterprisePtc Thingworx Kepware EdgePtc Thingworx .net-sdkPtc Thingworx Edge C-sdkPtc Thingworx Edge MicroserverPtc Kepware ServerexGe Digital Industrial Gateway ServerPtc Kepware ServerPtc Thingworx Industrial Connectivity
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48700CVE-2022-48689CVE-2024-27956CVE-2023-6363SQLNULL pointer dereferenceCVE-2023-41830CVE-2015-2051arbitrary
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook