CVE-2023-29445

Description

References

• cisa.gov/news-events/ics-advisories/icsa-23-243-03 · Third Party Advisory
• dragos.com/advisory/ptcs-kepserverex-vulnerabilities · Third Party Advisory
• ptc.com/en/support/article/cs399528 · Vendor Advisory

More vulnerabilities in kepware kepserverex

• CVE-2023-29447MEDIUM 5.3An insufficiently protected credentials vulnerability in KEPServerEX could allow an adversary to capture user credentials as the web server …
• CVE-2023-29446MEDIUM 4.7An improper input validation vulnerability has been discovered that could allow an adversary to inject a UNC path via a malicious project fi…
• CVE-2023-29444HIGH 7.3An uncontrolled search path element vulnerability (DLL hijacking) has been discovered that could allow a locally authenticated adversary to …
• CVE-2022-2848CRITICAL 9.1This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kepware KEPServerEX 6.11.718.0. Authentica…
• CVE-2022-2825CRITICAL 9.8This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kepware KEPServerEX 6.11.718.0. Authentica…