TI
Product
Thingworx Industrial Connectivity
13
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 8High 3Medium 2Low 0
Watch
Add Thingworx Industrial Connectivity to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-2825 | 9.8 | Mar 29 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kepware KEPServerEX 6.11.718.0 Affected: All versions, or not specified |
| CVE-2023-0755 | 9.8 | Feb 23 | The affected products are vulnerable to an improper validation of array index, which could allow an attacker to crash the server and remotely execute arbitrary code Affected: All versions, or not specified |
| CVE-2023-0754 | 9.8 | Feb 23 | The affected products are vulnerable to an integer overflow or wraparound, which could allow an attacker to crash the server and remotely execute arbitrary code Affected: All versions, or not specified |
| CVE-2020-27265 | 9.8 | Jan 14 | KEPServerEX: v6.0 to v6.9, ThingWorx Kepware Server: v6.8 and v6.9, ThingWorx Industrial Connectivity: All versions, OPC-Aggregator: All versions, Rockwell Automation KEPServer… Affected: All versions, or not specified |
| CVE-2023-5908 | 9.1 | Nov 30 | KEPServerEX is vulnerable to a buffer overflow which may allow an attacker to crash the product being accessed or leak information Affected: All versions, or not specified |
| CVE-2022-2848 | 9.1 | Mar 29 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kepware KEPServerEX 6.11.718.0 Affected: All versions, or not specified |
| CVE-2020-27267 | 9.1 | Jan 14 | KEPServerEX v6.0 to v6.9, ThingWorx Kepware Server v6.8 and v6.9, ThingWorx Industrial Connectivity (all versions), OPC-Aggregator (all versions), Rockwell Automation KEPServer… Affected: All versions, or not specified |
| CVE-2020-27263 | 9.1 | Jan 14 | KEPServerEX: v6.0 to v6.9, ThingWorx Kepware Server: v6.8 and v6.9, ThingWorx Industrial Connectivity: All versions, OPC-Aggregator: All versions, Rockwell Automation KEPServer… Affected: All versions, or not specified |
| CVE-2023-29445 | 7.8 | Jan 10 | An uncontrolled search path element vulnerability (DLL hijacking) has been discovered that could allow a locally authenticated adversary to escalate privileges to SYSTEM Affected: 8.0 through 8.5 |
| CVE-2023-5909 | 7.5 | Nov 30 | KEPServerEX does not properly validate certificates from clients which may allow unauthenticated users to connect Affected: All versions, or not specified |
| CVE-2023-29444 | 7.3 | Jan 10 | An uncontrolled search path element vulnerability (DLL hijacking) has been discovered that could allow a locally authenticated adversary to escalate privileges to SYSTEM Affected: 8.0 through 8.5 |
| CVE-2023-29447 | 5.3 | Jan 10 | An insufficiently protected credentials vulnerability in KEPServerEX could allow an adversary to capture user credentials as the web server uses basic authentication Affected: 8.0 through 8.5 |
| CVE-2023-29446 | 4.7 | Jan 10 | An improper input validation vulnerability has been discovered that could allow an adversary to inject a UNC path via a malicious project file Affected: 8.0 through 8.5 |
Showing 13