Skip to content
OpenAdvisories
Critical ICSA-22-242-10 2 CVEs

PTC Kepware KEPServerEX (Update A)

Published Aug 30, 2022 · Updated Sep 8, 2022 · Revision 2

Vendor: PTC Product: GE Digital Industrial Gateway Server Product: Kepware KEPServerEX Product: OPC-Aggregator Product: Rockwell Automation KEPServer Enterprise Product: Software Toolbox TOP Server Product: ThingWorkx Industrial Connectivity Product: ThingWorkx Kepware Edge Product: ThingWorkx Kepware Server

Summary

Successful exploitation of these vulnerabilities could allow an attacker to crash the device or remotely execute arbitrary code.

Vulnerabilities 2

  • Critical 9.8
    CVE-2022-2825

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kepware KEPServerEX 6…

    Kepware KEPServerEX
  • Critical 9.1
    CVE-2022-2848

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kepware KEPServerEX 6…

    Kepware KEPServerEX

Revision history

  1. #2

    PTC Kepware KEPServerEX (Update A)

  2. #1

    PTC Kepware KEPServerEX (Update A)

References