KEPServer Enterprise vulnerabilities

4 known vulnerabilities in KEPServer Enterprise from Rockwell Automation. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.1 Critical severity

  KEPServerEX: Improper Restriction of Operations within the Bounds of a Memory Buffer

  CVE-2022-2848Mar 29, 2023KepwareEPSS 3.37%

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kepware KEPServerEX 6.11.718.0. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of text encoding conver

• 9.8 Critical severity

  KEPServerEX: Stack-based Buffer Overflow

  CVE-2022-2825Mar 29, 2023KepwareEPSS 3.4%

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kepware KEPServerEX 6.11.718.0. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of text encoding conver

• 9.8 Critical severity

  ThingWorx Edge C-SDK: Improper Validation of Array Index

  CVE-2023-0755Feb 23, 2023PTCEPSS 11.8%

  The affected products are vulnerable to an improper validation of array index, which could allow an attacker to crash the server and remotely execute arbitrary code.

• 9.8 Critical severity

  ThingWorx Edge C-SDK: Integer Overflow or Wraparound

  CVE-2023-0754Feb 23, 2023PTCEPSS 2.94%

  The affected products are vulnerable to an integer overflow or wraparound, which could allow an attacker to crash the server and remotely execute arbitrary code.