CVE-2023-29446

概要

参考情報

• cisa.gov/news-events/ics-advisories/icsa-23-243-03 · Third Party Advisory
• dragos.com/advisory/ptcs-kepserverex-vulnerabilities · Third Party Advisory
• ptc.com/en/support/article/cs399528 · Vendor Advisory

kepware kepserverex のその他の脆弱性

• CVE-2023-29447中 5.3An insufficiently protected credentials vulnerability in KEPServerEX could allow an adversary to capture user credentials as the web server …
• CVE-2023-29445高 7.8An uncontrolled search path element vulnerability (DLL hijacking) has been discovered that could allow a locally authenticated adversary to …
• CVE-2023-29444高 7.3An uncontrolled search path element vulnerability (DLL hijacking) has been discovered that could allow a locally authenticated adversary to …
• CVE-2022-2848緊急 9.1This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kepware KEPServerEX 6.11.718.0. Authentica…
• CVE-2022-2825緊急 9.8This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kepware KEPServerEX 6.11.718.0. Authentica…