The affected products are vulnerable to an improper validation of array index, which could allow an attacker to crash the server and remotely execute arbitrary code.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
ThingWorx Edge C-SDK
Vendor
PTC
Product
ThingWorx Edge C-SDK
Platforms
Unknown
Default status
unaffected
ThingWorx Edge C-SDK · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
Unavailable
v2.2.12.1052
None listed
.NET-SDK
Vendor
Microsoft
Product
.NET-SDK
Platforms
Unknown
Default status
unaffected
.NET-SDK · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
Unavailable
v5.8.4.971
None listed
ThingWorx Edge MicroServer (EMS)
Vendor
PTC
Product
ThingWorx Edge MicroServer (EMS)
Platforms
Unknown
Default status
unaffected
ThingWorx Edge MicroServer (EMS) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
Unavailable
v5.4.10.0
None listed
Kepware KEPServerEX
Vendor
PTC
Product
Kepware KEPServerEX
Platforms
Unknown
Default status
unaffected
Kepware KEPServerEX · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
Unavailable
v6.12
None listed
ThingWorx Kepware Server
Vendor
PTC
Product
ThingWorx Kepware Server
Platforms
Unknown
Default status
unaffected
ThingWorx Kepware Server · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
Unavailable
v6.12
None listed
ThingWorx Industrial Connectivity
Vendor
PTC
Product
ThingWorx Industrial Connectivity
Platforms
Unknown
Default status
unaffected
ThingWorx Industrial Connectivity · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
All Versions
affected
Unavailable
Unavailable
Unavailable
None listed
ThingWorx Kepware Edge
Vendor
PTC
Product
ThingWorx Kepware Edge
Platforms
Unknown
Default status
unaffected
ThingWorx Kepware Edge · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
Unavailable
v1.5
None listed
KEPServer Enterprise
Vendor
Rockwell Automation
Product
KEPServer Enterprise
Platforms
Unknown
Default status
unaffected
KEPServer Enterprise · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
Unavailable
v6.12
None listed
Digital Industrial Gateway Server
Vendor
General Electric
Product
Digital Industrial Gateway Server
Platforms
Unknown
Default status
unaffected
Digital Industrial Gateway Server · Scoped product and version facts