Skip to content

Known vulnerabilities in PTC ThingWorx Kepware Server

Is your version affected?

CVE Summary Score Published
CVE-2023-29447 An insufficiently protected credentials vulnerability in KEPServerEX could allow an adversary to capture user… 5.7 Medium Jan 10, 2024
CVE-2023-29446 An improper input validation vulnerability has been discovered that could allow an adversary to inject a UNC path via… 4.7 Medium Jan 10, 2024
CVE-2023-29445 An uncontrolled search path element vulnerability (DLL hijacking) has been discovered that could allow a locally… 7.8 High Jan 10, 2024
CVE-2023-29444 An uncontrolled search path element vulnerability (DLL hijacking) has been discovered that could allow a locally… 6.3 Medium Jan 10, 2024
CVE-2023-5909 KEPServerEX does not properly validate certificates from clients which may allow unauthenticated users to connect 7.5 High Nov 30, 2023
CVE-2023-5908 KEPServerEX is vulnerable to a buffer overflow which may allow an attacker to crash the product being accessed or leak… 9.1 Critical Nov 30, 2023
CVE-2023-0754 The affected products are vulnerable to an integer overflow or wraparound, which could  allow an attacker to crash the… 9.8 Critical Feb 23, 2023
CVE-2023-0755 The affected products are vulnerable to an improper validation of array index, which could allow an attacker to crash… 9.8 Critical Feb 23, 2023

Other PTC products