9.1
Critical
CVE-2023-5908 KEPServerEX is vulnerable to a buffer overflow which may allow an attacker to crash the product being accessed or leak…
Description
KEPServerEX is vulnerable to a buffer overflow which may allow an attacker to crash the product being accessed or leak information.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| KEPServerEX 6.14 | earliest → 6.14.263.0 | No fix stated |
| ThingWorx Kepware Server 6.14 | earliest → 6.14.263.0 | No fix stated |
| ThingWorx Industrial Connectivity | Versions not published | |
| OPC-Aggregator 6.14 | earliest → 6.14 | No fix stated |
| ThingWorx Kepware Edge 1.7 | earliest → 1.7 | No fix stated |
| KEPServer Enterprise 6.14 | earliest → 6.14.263.0 | No fix stated |
| Industrial Gateway Server 7.614 | earliest → 7.614 | No fix stated |
| TOP Server 6.14 | earliest → 6.14.263.0 | No fix stated |