Non notée
CVE-2020-27267 KEPServerEX v6.0 to v6.9, ThingWorx Kepware Server v6.8 and v6.9, ThingWorx Industrial Connectivity (all versions),…
Description
KEPServerEX v6.0 to v6.9, ThingWorx Kepware Server v6.8 and v6.9, ThingWorx Industrial Connectivity (all versions), OPC-Aggregator (all versions), Rockwell Automation KEPServer Enterprise, GE Digital Industrial Gateway Server v7.68.804 and v7.66, and Software Toolbox TOP Server all 6.x versions, are vulnerable to a heap-based buffer overflow. Opening a specifically crafted OPC UA message could allow an attacker to crash the server and potentially leak data.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| PTC Kepware KEPServerEX | Versions non publiées | |
| ThingWorx Kepware Server | Versions non publiées | |
| ThingWorx Industrial Connectivity | Versions non publiées | |
| OPC-Aggregator | Versions non publiées | |
| Rockwell Automation KEPServer Enterprise | Versions non publiées | |
| GE Digital Industrial Gateway Server | 7.68.804 | Pas de correctif indiqué |
| GE Digital Industrial Gateway Server | 7.66 | Pas de correctif indiqué |
| Software Toolbox TOP Server | Versions non publiées |