Vulnerabilities

TI-2023-03574 CVE-2023-3825 · GHSA-m3jq-gg7x-47cq

Uncontrolled resource consumption in PTC KEPServerEX

LOW 34

PTC’s KEPServerEX Versions 6.0 to 6.14.263 are vulnerable to being made to read a recursively defined object that leads to uncontrolled resource consumption.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00757 Published 2023-07-31 No fix listed CWE-400

TI-2022-02641 CVE-2022-2848 · GHSA-f952-wvmx-6w24

Heap-based buffer overflow in Kepware KEPServerEX

MEDIUM 51

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kepware KEPServerEX 6.11.718.0.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.03366 Published 2023-03-29 No fix listed CWE-122

TI-2022-02619 CVE-2022-2825 · GHSA-6rww-x4m5-6j62

Stack-based buffer overflow in Kepware KEPServerEX

MEDIUM 55

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kepware KEPServerEX 6.11.718.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03402 Published 2023-03-29 No fix listed CWE-121

TI-2020-10614 CVE-2020-13535 · GHSA-mh9j-g4g3-6xcv

Incorrect default permissions in Kepware

LOW 35

A privilege escalation vulnerability exists in Kepware LinkMaster 3.0.94.0.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00688 Published 2020-12-18 No fix listed CWE-276

TI-2013-02437 CVE-2013-2789 · GHSA-46hj-m8hr-c3h7

The Kepware DNP Master Driver for the KEPServerEX Communications Platform before…

LOW 38

The Kepware DNP Master Driver for the KEPServerEX Communications Platform before 5.12.140.0 allows remote attackers to cause a denial of service (master-station infinite loop) via crafted DNP3 packets to TCP port 20000 a…

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.01818 Published 2013-08-22 No fix listed CWE-835