KEPServerEX v6.0 to v6.9, ThingWorx Kepware Server v6.8 and v6.9, ThingWorx Industrial Connectivity (all versions), OPC-Aggregator (all versions), Rockwell Automation KEPServer Enterprise, GE Digital Industrial Gateway Server v7.68.804 and v7.66, and Software Toolbox TOP Server all 6.x versions, are vulnerable to a heap-based buffer overflow. Opening a specifically crafted OPC UA message could allow an attacker to crash the server and potentially leak data.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
PTC Kepware KEPServerEX
Vendor
n/a
Product
PTC Kepware KEPServerEX
Platforms
Unknown
Default status
Unknown
PTC Kepware KEPServerEX · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
v6.0 to v6.9
affected
Unavailable
Unavailable
Unavailable
None listed
ThingWorx Kepware Server
Vendor
n/a
Product
ThingWorx Kepware Server
Platforms
Unknown
Default status
Unknown
ThingWorx Kepware Server · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
v6.8 and v6.9
affected
Unavailable
Unavailable
Unavailable
None listed
ThingWorx Industrial Connectivity
Vendor
n/a
Product
ThingWorx Industrial Connectivity
Platforms
Unknown
Default status
Unknown
ThingWorx Industrial Connectivity · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
All versions
affected
Unavailable
Unavailable
Unavailable
None listed
OPC-Aggregator
Vendor
n/a
Product
OPC-Aggregator
Platforms
Unknown
Default status
Unknown
OPC-Aggregator · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
All versions
affected
Unavailable
Unavailable
Unavailable
None listed
Rockwell Automation KEPServer Enterprise
Vendor
n/a
Product
Rockwell Automation KEPServer Enterprise
Platforms
Unknown
Default status
Unknown
Rockwell Automation KEPServer Enterprise · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
All versions
affected
Unavailable
Unavailable
Unavailable
None listed
GE Digital Industrial Gateway Server
Vendor
n/a
Product
GE Digital Industrial Gateway Server
Platforms
Unknown
Default status
Unknown
GE Digital Industrial Gateway Server · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
v7.68.804
affected
Unavailable
Unavailable
Unavailable
None listed
v7.66
affected
Unavailable
Unavailable
Unavailable
None listed
Software Toolbox TOP Server
Vendor
n/a
Product
Software Toolbox TOP Server
Platforms
Unknown
Default status
Unknown
Software Toolbox TOP Server · Scoped product and version facts