Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2020-27263

KEPServerEX: v6.0 to v6.9, ThingWorx Kepware Server: v6.8 and v6.9, ThingWorx Industrial Connectivity: All versions, OPC-Aggregator: All versions, Rockwell Automation KEPServer Ent

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

KEPServerEX: v6.0 to v6.9, ThingWorx Kepware Server: v6.8 and v6.9, ThingWorx Industrial Connectivity: All versions, OPC-Aggregator: All versions, Rockwell Automation KEPServer Enterprise, GE Digital Industrial Gateway Server: v7.68.804 and v7.66, Software Toolbox TOP Server: All 6.x versions, are vulnerable to a heap-based buffer overflow. Opening a specifically crafted OPC UA message could allow an attacker to crash the server and potentially leak data.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a PTC Kepware KEPServerEX

  • v6.0 to v6.9affected

n/a ThingWorx Kepware Server

  • v6.8 and v6.9affected

n/a ThingWorx Industrial Connectivity

  • All versionsaffected

n/a OPC-Aggregator

  • All versionsaffected

n/a Rockwell Automation KEPServer Enterprise

  • All versionsaffected

n/a GE Digital Industrial Gateway Server

  • v7.68.804affected
  • v7.66affected

n/a Software Toolbox TOP Server

  • All 6.x versionsaffected

References