Read the docs

Software Toolbox

Records9All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical6CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Software Toolbox records in CISA KEV

No Software Toolbox vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Top Server 8 records MEDIUM

Records

9 records

TI-2020-16591 CVE-2020-27265 · GHSA-355x-g6q7-4c7g

Stack-based buffer overflow in PTC Kepware KEPServerEX; ThingWorx Industrial…

Priority MEDIUM 56

KEPServerEX: v6.0 to v6.9, ThingWorx Kepware Server: v6.8 and v6.9, ThingWorx Industrial Connectivity: All versions, OPC-Aggregator: All versions, Rockwell Automation KEPServer Enterprise, GE Digital Industrial Gateway S…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.12504 Published 2021-01-13 No fix listed CWE-121
TI-2022-02619 CVE-2022-2825 · GHSA-6rww-x4m5-6j62

Stack-based buffer overflow in Kepware KEPServerEX

Priority MEDIUM 55

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kepware KEPServerEX 6.11.718.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03402 Published 2023-03-29 No fix listed CWE-121
TI-2022-02641 CVE-2022-2848 · GHSA-f952-wvmx-6w24

Heap-based buffer overflow in Kepware KEPServerEX

Priority MEDIUM 51

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kepware KEPServerEX 6.11.718.0.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.03366 Published 2023-03-29 No fix listed CWE-122
TI-2020-16593 CVE-2020-27267 · GHSA-mr5h-jvqg-8jg8

Use after free in PTC Kepware KEPServerEX

Priority MEDIUM 48

KEPServerEX v6.0 to v6.9, ThingWorx Kepware Server v6.8 and v6.9, ThingWorx Industrial Connectivity (all versions), OPC-Aggregator (all versions), Rockwell Automation KEPServer Enterprise, GE Digital Industrial Gateway S…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.05986 Published 2021-01-13 No fix listed CWE-416
TI-2020-16589 CVE-2020-27263 · GHSA-66v8-hp22-2q37

Heap-based buffer overflow in PTC Kepware KEPServerEX

Priority MEDIUM 48

KEPServerEX: v6.0 to v6.9, ThingWorx Kepware Server: v6.8 and v6.9, ThingWorx Industrial Connectivity: All versions, OPC-Aggregator: All versions, Rockwell Automation KEPServer Enterprise, GE Digital Industrial Gateway S…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.05986 Published 2021-01-13 No fix listed CWE-122
TI-2023-05440 CVE-2023-5908 · GHSA-m695-35xv-pjcm

Heap Based Buffer Overflow in PTC KEPServerEx

Priority MEDIUM 41

KEPServerEX is vulnerable to a buffer overflow which may allow an attacker to crash the product being accessed or leak information.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00962 Published 2023-11-30 No fix listed CWE-122
TI-2024-05651 CVE-2024-6098 · GHSA-w2rc-qg2j-54hv

PTC Kepware ThingWorx Kepware Server Allocation of Resources Without Limits or Throttling

Priority LOW 27

When performing an online tag generation to devices which communicate using the ControlLogix protocol, a machine-in-the-middle, or a device that is not configured correctly, could deliver a response leading to unrestrict…

CVSS 4.0MEDIUM 5.9 Adjacent network No auth User interaction EPSS 0.00397 Published 2024-08-16 No fix listed CWE-770
Open these records in search →