9.8
Critical
CVE-2023-0754 The affected products are vulnerable to an integer overflow or wraparound, which could allow an attacker to crash the…
Description
The affected products are vulnerable to an integer overflow or wraparound, which could allow an attacker to crash the server and remotely execute arbitrary code.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| ThingWorx Edge C-SDK 2.2 | earliest → 2.2.12.1052 | No fix stated |
| .NET-SDK 5.8 | earliest → 5.8.4.971 | No fix stated |
| ThingWorx Edge MicroServer (EMS) 5.4 | earliest → 5.4.10.0 | No fix stated |
| Kepware KEPServerEX 6.12 | earliest → 6.12 | No fix stated |
| ThingWorx Kepware Server 6.12 | earliest → 6.12 | No fix stated |
| ThingWorx Industrial Connectivity | Versions not published | |
| ThingWorx Kepware Edge 1.5 | earliest → 1.5 | No fix stated |
| KEPServer Enterprise 6.12 | earliest → 6.12 | No fix stated |
| Digital Industrial Gateway Server 7.612 | earliest → 7.612 | No fix stated |