9.8
Critical
CVE-2023-0755 The affected products are vulnerable to an improper validation of array index, which could allow an attacker to crash…
Description
The affected products are vulnerable to an improper validation of array index, which could allow an attacker to crash the server and remotely execute arbitrary code.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| ThingWorx Edge C-SDK 2.2 | earliest → 2.2.12.1052 | No fix stated |
| .NET-SDK 5.8 | earliest → 5.8.4.971 | No fix stated |
| ThingWorx Edge MicroServer (EMS) 5.4 | earliest → 5.4.10.0 | No fix stated |
| Kepware KEPServerEX 6.12 | earliest → 6.12 | No fix stated |
| ThingWorx Kepware Server 6.12 | earliest → 6.12 | No fix stated |
| ThingWorx Industrial Connectivity | Versions not published | |
| ThingWorx Kepware Edge 1.5 | earliest → 1.5 | No fix stated |
| KEPServer Enterprise 6.12 | earliest → 6.12 | No fix stated |
| Digital Industrial Gateway Server 7.612 | earliest → 7.612 | No fix stated |