Login Request a demo
KK
Product
Kepware Kepserverex
by Ptc · last CVE Jan 10, 2024
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities9In the news0Timeline
Severity mix
Critical 5High 2Medium 2Low 0
Severity
All severities9Critical5High2Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Kepware Kepserverex to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-2825
9.8
3%
Mar 29
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kepware KEPServerEX 6.11.718.0
Affected: before 6.12
CVE-2020-27265
9.8
10%
Jan 14
KEPServerEX: v6.0 to v6.9, ThingWorx Kepware Server: v6.8 and v6.9, ThingWorx Industrial Connectivity: All versions, OPC-Aggregator: All versions, Rockwell Automation KEPServer…
Affected: 6.0; 6.9
CVE-2022-2848
9.1
3%
Mar 29
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kepware KEPServerEX 6.11.718.0
Affected: before 6.12
CVE-2020-27267
9.1
5%
Jan 14
KEPServerEX v6.0 to v6.9, ThingWorx Kepware Server v6.8 and v6.9, ThingWorx Industrial Connectivity (all versions), OPC-Aggregator (all versions), Rockwell Automation KEPServer…
Affected: 6.0; 6.9
CVE-2020-27263
9.1
5%
Jan 14
KEPServerEX: v6.0 to v6.9, ThingWorx Kepware Server: v6.8 and v6.9, ThingWorx Industrial Connectivity: All versions, OPC-Aggregator: All versions, Rockwell Automation KEPServer…
Affected: 6.0; 6.9
CVE-2023-29445
7.8
0%
Jan 10
An uncontrolled search path element vulnerability (DLL hijacking) has been discovered that could allow a locally authenticated adversary to escalate privileges to SYSTEM
Affected: 6.0.2107.0 through 6.14.263.0
CVE-2023-29444
7.3
0%
Jan 10
An uncontrolled search path element vulnerability (DLL hijacking) has been discovered that could allow a locally authenticated adversary to escalate privileges to SYSTEM
Affected: 6.0.2107.0 through 6.14.263.0
CVE-2023-29447
5.3
0%
Jan 10
An insufficiently protected credentials vulnerability in KEPServerEX could allow an adversary to capture user credentials as the web server uses basic authentication
Affected: 6.0.2107.0 through 6.14.263.0
CVE-2023-29446
4.7
0%
Jan 10
An improper input validation vulnerability has been discovered that could allow an adversary to inject a UNC path via a malicious project file
Affected: 6.0.2107.0 through 6.14.263.0
Showing 9