Read the docs

Kepware

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

Kepware records in CISA KEV

No Kepware vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

5 records

Priority MEDIUM 55

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kepware KEPServerEX 6.11.718.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03402 Published 2023-03-29 No fix listed CWE-121
Priority MEDIUM 51

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kepware KEPServerEX 6.11.718.0.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.03366 Published 2023-03-29 No fix listed CWE-122
Priority LOW 38

The Kepware DNP Master Driver for the KEPServerEX Communications Platform before 5.12.140.0 allows remote attackers to cause a denial of service (master-station infinite loop) via crafted DNP3 packets to TCP port 20000 a…

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.01818 Published 2013-08-22 No fix listed CWE-835
TI-2020-10614 CVE-2020-13535 · GHSA-mh9j-g4g3-6xcv

Incorrect default permissions in Kepware

Priority LOW 35

A privilege escalation vulnerability exists in Kepware LinkMaster 3.0.94.0.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00688 Published 2020-12-18 No fix listed CWE-276
Priority LOW 34

PTC’s KEPServerEX Versions 6.0 to 6.14.263 are vulnerable to being made to read a recursively defined object that leads to uncontrolled resource consumption.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00757 Published 2023-07-31 No fix listed CWE-400
Open these records in search →