Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2020-27267

KEPServerEX v6.0 to v6.9, ThingWorx Kepware Server v6.8 and v6.9, ThingWorx Industrial Connectivity (all versions), OPC-Aggregator (all versions), Rockwell Automation KEPServer Ent

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

KEPServerEX v6.0 to v6.9, ThingWorx Kepware Server v6.8 and v6.9, ThingWorx Industrial Connectivity (all versions), OPC-Aggregator (all versions), Rockwell Automation KEPServer Enterprise, GE Digital Industrial Gateway Server v7.68.804 and v7.66, and Software Toolbox TOP Server all 6.x versions, are vulnerable to a heap-based buffer overflow. Opening a specifically crafted OPC UA message could allow an attacker to crash the server and potentially leak data.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a PTC Kepware KEPServerEX

  • v6.0 to v6.9affected

n/a ThingWorx Kepware Server

  • v6.8 and v6.9affected

n/a ThingWorx Industrial Connectivity

  • All versionsaffected

n/a OPC-Aggregator

  • All versionsaffected

n/a Rockwell Automation KEPServer Enterprise

  • All versionsaffected

n/a GE Digital Industrial Gateway Server

  • v7.68.804affected
  • v7.66affected

n/a Software Toolbox TOP Server

  • All 6.x versionsaffected

References