Description
KEPServerEX is vulnerable to a buffer overflow which may allow an attacker to crash the product being accessed or leak information.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| PTC | KEPServerEX | ≤ 6.14.263.0 | — |
| PTC | ThingWorx Kepware Server | ≤ 6.14.263.0 | — |
| PTC | ThingWorx Industrial Connectivity | All versions | — |
| PTC | OPC-Aggregator | ≤ 6.14 | — |
| PTC | ThingWorx Kepware Edge | ≤ 1.7 | — |
| Rockwell Automation | KEPServer Enterprise | ≤ 6.14.263.0 | — |
| GE Gigital | Industrial Gateway Server | ≤ 7.614 | — |
| Software Toolbox | TOP Server | ≤ 6.14.263.0 | — |
Advisories 1
- ICSA-23-334-03 PTC KEPServerEx CISA ICS & IT advisories · Nov 30, 2023
References
- https://www.cisa.gov/news-events/ics-advisories/icsa-23-334-03 government-resource