5.7
Medium
CVE-2023-29447 An insufficiently protected credentials vulnerability in KEPServerEX could allow an adversary to capture user…
Description
An insufficiently protected credentials vulnerability in KEPServerEX could allow an adversary to capture user credentials as the web server uses basic authentication.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Kepware KEPServerEX 6.14 | earliest → 6.14.263.0 | No fix stated |
| ThingWorx Kepware Server 6.14 | earliest → 6.14.263.0 | No fix stated |
| ThingWorx Industrial Connectivity 8.0 | 8.0 → 8.5 | No fix stated |
Other CVEs of Kepware KEPServerEX
The 7 CVEs of Kepware KEPServerEX →
CVE-2024-6098
When performing an online tag generation to devices which communicate using the ControlLogix protocol, a…
5.3
Medium
CVE-2023-29446
An improper input validation vulnerability has been discovered that could allow an adversary to inject a UNC path via…
4.7
Medium
CVE-2023-29445
An uncontrolled search path element vulnerability (DLL hijacking) has been discovered that could allow a locally…
7.8
High
CVE-2023-29444
An uncontrolled search path element vulnerability (DLL hijacking) has been discovered that could allow a locally…
6.3
Medium