Skip to content
OpenAdvisories
High · 7.5 CVE-2023-5909 EUVD-2023-58182GHSA-rw69-wr48-w7px

Improper Validation of Certificate with Host Mismatch in PTC KEPServerEx

Published Nov 30, 2023 · Updated Feb 25, 2026 · Assigned by icscert

Vendor: GE Gigital Vendor: PTC Vendor: Rockwell Automation Vendor: Software Toolbox Product: Industrial Gateway Server Product: KEPServer Enterprise Product: KEPServerEX Product: OPC-Aggregator Product: ThingWorx Industrial Connectivity Product: ThingWorx Kepware Edge Product: ThingWorx Kepware Server Product: TOP Server Category: Browsers Category: ICS / OT

Description

KEPServerEX does not properly validate certificates from clients which may allow unauthenticated users to connect.

Affected products

VendorProductAffectedFixed
PTC KEPServerEX ≤ 6.14.263.0 —
PTC ThingWorx Kepware Server ≤ 6.14.263.0 —
PTC ThingWorx Industrial Connectivity All versions —
PTC OPC-Aggregator ≤ 6.14 —
PTC ThingWorx Kepware Edge ≤ 1.7 —
Rockwell Automation KEPServer Enterprise ≤ 6.14.263.0 —
GE Gigital Industrial Gateway Server ≤ 7.614 —
Software Toolbox TOP Server ≤ 6.14.263.0 —

Advisories 1

References