| Package | Affected versions | Patched versions |
|---|---|---|
| kepware kepserverex | ≥ 6.0.2107.0, ≤ 6.14.263.0 | |
| thingworx industrial connectivity | ≥ 8.0, ≤ 8.5 | |
| thingworx kepware server | ≥ 6.8, ≤ 6.14.263.0 |
An improper input validation vulnerability has been discovered that could allow an adversary to inject a UNC path via a malicious project file. This allows an adversary to capture NLTMv2 hashes and potentially crack them offline.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free