| Package | Affected versions | Patched versions |
|---|---|---|
| digital industrial gateway server | ≤ 7.612 | |
| kepware server | ≤ 6.12 | |
| kepware serverex | ≤ 6.12 | |
| thingworx .net-sdk | ≤ 5.8.4.971 | |
| thingworx edge c-sdk | ≤ 2.2.12.1052 | |
| thingworx edge microserver | ≤ 5.4.10.0 | |
| thingworx kepware edge | ≤ 1.5 | |
| kepserver enterprise | ≤ 6.12 |
The affected products are vulnerable to an improper validation of array index, which could allow an attacker to crash the server and remotely execute arbitrary code.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free