Advisories · Technology
PTC Kepware KEPServerEX.
Every CVE that names PTC Kepware KEPServerEX among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.9 Medium
PTC Kepware ThingWorx Kepware Server Allocation of Resources Without Limits or Throttling
- PTC Kepware ThingWorx Kepware Server
- PTC Kepware KEPServerEX
- Denial of service
- CVSS 5.7 Medium
Insufficiently Protected Credentials in PTC's Kepware KEPServerEX
- PTC Kepware KEPServerEX
- PTC ThingWorx Kepware Server
- Hard-coded credentials
- CVSS 4.7 Medium
Improper Input Validation in PTC's Kepware KEPServerEX
- PTC Kepware KEPServerEX
- PTC ThingWorx Kepware Server
- CWE-40
- CVSS 7.8 High
Uncontrolled Search Path Element in PTC's Kepware KEPServerEX
- PTC Kepware KEPServerEX
- PTC ThingWorx Kepware Server
- CWE-427
- CVSS 6.3 Medium
Uncontrolled Search Path Element in PTC's Kepware KEPServerEX
- PTC Kepware KEPServerEX
- PTC ThingWorx Kepware Server
- CWE-427
- CVSS 9.8 CriticalCritical · CVSS 9+
Integer overflow in PTC ThingWorx Edge C-SDK and others
- PTC ThingWorx Edge C-SDK
- Microsoft .NET-SDK
- Memory corruption
- CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS
Improper array index validation in PTC ThingWorx Edge C-SDK and others
- PTC ThingWorx Edge C-SDK
- Microsoft .NET-SDK
- CWE-129
-
Heap-based buffer overflow in PTC Kepware KEPServerEX and others
- PTC Kepware KEPServerEX
- ThingWorx Kepware Server
- Memory corruption
-
Use after free in PTC Kepware KEPServerEX and others
- PTC Kepware KEPServerEX
- ThingWorx Kepware Server
- Memory corruption