Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2023-5909

Improper Validation of Certificate with Host Mismatch in PTC KEPServerEx

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

KEPServerEX does not properly validate certificates from clients which may allow unauthenticated users to connect.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

PTC KEPServerEX

Default version status: unaffected

  • 0 to ≤ 6.14.263.0affected

PTC ThingWorx Kepware Server

Default version status: unaffected

  • 0 to ≤ 6.14.263.0affected

PTC ThingWorx Industrial Connectivity

Default version status: unaffected

  • All versionsaffected

PTC OPC-Aggregator

Default version status: unaffected

  • 0 to ≤ 6.14affected

PTC ThingWorx Kepware Edge

Default version status: unaffected

  • 0 to ≤ 1.7affected

Rockwell Automation KEPServer Enterprise

Default version status: unaffected

  • 0 to ≤ 6.14.263.0affected

GE Gigital Industrial Gateway Server

Default version status: unaffected

  • 0 to ≤ 7.614affected

Software Toolbox TOP Server

Default version status: unaffected

  • 0 to ≤ 6.14.263.0affected

References