Critical ICSA-23-054-01 2 CVEs

PTC ThingWorx Edge

Published Feb 27, 2023 · Updated Feb 27, 2023

Vendor: PTC Product: .NET-SDK Product: GE Digital Industrial Gateway Server Product: Kepware KEPServerEX Product: Rockwell Automation KEPServer Enterprise Product: ThingWorx Edge C-SDK Product: ThingWorx Edge MicroServer (EMS) Product: ThingWorx Industrial Connectivity Product: ThingWorx Kepware Edge Product: ThingWorx Kepware Server (formerly ThingWorx Industrial Connectivity)

Summary

Successful exploitation of these vulnerabilities could allow an attacker to crash the device they accessed or could allow remote code execution.

Vulnerabilities 2

Critical 9.8

CVE-2023-0754

The affected products are vulnerable to an integer overflow or wraparound, which could allow an attacker to crash the …

Microsoft Rockwell Automation PTC General Electric Browsers ICS / OT

Feb 23, 2023
Critical 9.8

CVE-2023-0755 EPSS 12%

The affected products are vulnerable to an improper validation of array index, which could allow an attacker to crash t…

Microsoft Rockwell Automation PTC General Electric Browsers ICS / OT

Feb 23, 2023

Revision history

2023-02-27 #1
CSAF Creation Date

References

ICS Advisory ICSA-23-054-01 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-23-054-01
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
Recommended Practices
https://us-cert.cisa.gov/ics/Recommended-Practices
Recommended Practices
https://cisa.gov/ics