Skip to content
CVE PROGRAM SOURCE RECORD9.1 Critical

CVE-2023-5908

Heap Based Buffer Overflow in PTC KEPServerEx

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

KEPServerEX is vulnerable to a buffer overflow which may allow an attacker to crash the product being accessed or leak information.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

PTC KEPServerEX

Default version status: unaffected

  • 0 to ≤ 6.14.263.0affected

PTC ThingWorx Kepware Server

Default version status: unaffected

  • 0 to ≤ 6.14.263.0affected

PTC ThingWorx Industrial Connectivity

Default version status: unaffected

  • All versionsaffected

PTC OPC-Aggregator

Default version status: unaffected

  • 0 to ≤ 6.14affected

PTC ThingWorx Kepware Edge

Default version status: unaffected

  • 0 to ≤ 1.7affected

Rockwell Automation KEPServer Enterprise

Default version status: unaffected

  • 0 to ≤ 6.14.263.0affected

GE Gigital Industrial Gateway Server

Default version status: unaffected

  • 0 to ≤ 7.614affected

Software Toolbox TOP Server

Default version status: unaffected

  • 0 to ≤ 6.14.263.0affected

References