Skip to content
OpenAdvisories
Critical ICSA-20-352-02 3 CVEs

PTC Kepware KEPServerEX (Update A)

Published Dec 17, 2020 · Updated Jan 5, 2021 · Revision 2

Vendor: PTC Product: GE Digital Industrial Gateway Server Product: KEPServerEX Product: OPC-Aggregator Product: Rockwell Automation KEPServer Enterprise Product: Software Toolbox TOP Server Product: ThingWorx Industrial Connectivity Product: ThingWorx Kepware Server

Summary

Successful exploitation of these vulnerabilities could lead to a server crashing, a denial-of-service condition, data leakage, or remote code execution.

Vulnerabilities 3

  • Unscored —
    CVE-2020-27263

    KEPServerEX: v6.0 to v6.9, ThingWorx Kepware Server: v6.8 and v6.9, ThingWorx Industrial Connectivity: All versions, OP…

  • Unscored —
    CVE-2020-27265 EPSS 13%

    KEPServerEX: v6.0 to v6.9, ThingWorx Kepware Server: v6.8 and v6.9, ThingWorx Industrial Connectivity: All versions, OP…

  • Unscored —
    CVE-2020-27267

    KEPServerEX v6.0 to v6.9, ThingWorx Kepware Server v6.8 and v6.9, ThingWorx Industrial Connectivity (all versions), OPC…

Revision history

  1. #2

    ICSA-20-352-02 PTC Kepware KEPServerEX (Update A)

  2. #1

    ICSA-20-352-02 PTC KEPServerEX

References