5.7
Moyenne
CVE-2023-29447 An insufficiently protected credentials vulnerability in KEPServerEX could allow an adversary to capture user…
Description
An insufficiently protected credentials vulnerability in KEPServerEX could allow an adversary to capture user credentials as the web server uses basic authentication.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Kepware KEPServerEX 6.14 | premières → 6.14.263.0 | Pas de correctif indiqué |
| ThingWorx Kepware Server 6.14 | premières → 6.14.263.0 | Pas de correctif indiqué |
| ThingWorx Industrial Connectivity 8.0 | 8.0 → 8.5 | Pas de correctif indiqué |
Autres CVE de Kepware KEPServerEX
Les 7 CVE de Kepware KEPServerEX →
CVE-2024-6098
When performing an online tag generation to devices which communicate using the ControlLogix protocol, a…
5.3
Moyenne
CVE-2023-29446
An improper input validation vulnerability has been discovered that could allow an adversary to inject a UNC path via…
4.7
Moyenne
CVE-2023-29445
An uncontrolled search path element vulnerability (DLL hijacking) has been discovered that could allow a locally…
7.8
Élevée
CVE-2023-29444
An uncontrolled search path element vulnerability (DLL hijacking) has been discovered that could allow a locally…
6.3
Moyenne