Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

6 records

Vendor: PTC Component: Thingworx Kepware Edge Clear all filters
TI-2023-05440 CVE-2023-5908 · GHSA-m695-35xv-pjcm

Heap Based Buffer Overflow in PTC KEPServerEx

Priority MEDIUM 41

KEPServerEX is vulnerable to a buffer overflow which may allow an attacker to crash the product being accessed or leak information.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00962 Published 2023-11-30 No fix listed CWE-122
TI-2022-02641 CVE-2022-2848 · GHSA-f952-wvmx-6w24

Heap-based buffer overflow in Kepware KEPServerEX

Priority MEDIUM 51

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kepware KEPServerEX 6.11.718.0.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.03366 Published 2023-03-29 No fix listed CWE-122
TI-2022-02619 CVE-2022-2825 · GHSA-6rww-x4m5-6j62

Stack-based buffer overflow in Kepware KEPServerEX

Priority MEDIUM 55

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kepware KEPServerEX 6.11.718.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03402 Published 2023-03-29 No fix listed CWE-121
TI-2023-00714 CVE-2023-0754 · GHSA-fcc4-h688-392p

Integer overflow in PTC ThingWorx Edge C-SDK

Priority MEDIUM 54

The affected products are vulnerable to an integer overflow or wraparound, which could allow an attacker to crash the server and remotely execute arbitrary code.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02937 Published 2023-02-23 No fix listed CWE-190
TI-2023-00715 CVE-2023-0755 · GHSA-mqp8-25jm-w22w

Improper array index validation in PTC ThingWorx Edge C-SDK

Priority MEDIUM 62

The affected products are vulnerable to an improper validation of array index, which could allow an attacker to crash the server and remotely execute arbitrary code.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.11784 Published 2023-02-23 No fix listed CWE-129