Skip to content
Sign in
7.5 High

CVE-2023-5909 KEPServerEX does not properly validate certificates from clients which may allow unauthenticated users to connect

Description

KEPServerEX does not properly validate certificates from clients which may allow unauthenticated users to connect.

Affected products and versions

Product Affected versions Fixed in
KEPServerEX 6.14 earliest → 6.14.263.0 No fix stated
ThingWorx Kepware Server 6.14 earliest → 6.14.263.0 No fix stated
ThingWorx Industrial Connectivity Versions not published
OPC-Aggregator 6.14 earliest → 6.14 No fix stated
ThingWorx Kepware Edge 1.7 earliest → 1.7 No fix stated
KEPServer Enterprise 6.14 earliest → 6.14.263.0 No fix stated
Industrial Gateway Server 7.614 earliest → 7.614 No fix stated
TOP Server 6.14 earliest → 6.14.263.0 No fix stated

Other CVEs of KEPServerEX

The 3 CVEs of KEPServerEX →
CVE-2023-5908 KEPServerEX is vulnerable to a buffer overflow which may allow an attacker to crash the product being accessed or leak… 9.1 Critical CVE-2023-3825 PTC’s KEPServerEX Versions 6.0 to 6.14.263 are vulnerable to being made to read a recursively defined object that… 7.5 High
Track this CVE