CVE-2023-29445

Description

References

• cisa.gov/news-events/ics-advisories/icsa-23-243-03 · Third Party Advisory
• dragos.com/advisory/ptcs-kepserverex-vulnerabilities · Third Party Advisory
• ptc.com/en/support/article/cs399528 · Vendor Advisory

kepware kepserverex의 다른 취약점

• CVE-2023-29447보통 5.3An insufficiently protected credentials vulnerability in KEPServerEX could allow an adversary to capture user credentials as the web server …
• CVE-2023-29446보통 4.7An improper input validation vulnerability has been discovered that could allow an adversary to inject a UNC path via a malicious project fi…
• CVE-2023-29444높음 7.3An uncontrolled search path element vulnerability (DLL hijacking) has been discovered that could allow a locally authenticated adversary to …
• CVE-2022-2848심각 9.1This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kepware KEPServerEX 6.11.718.0. Authentica…
• CVE-2022-2825심각 9.8This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kepware KEPServerEX 6.11.718.0. Authentica…