Advisories · Technology

PTC ThingWorx Industrial Connectivity.

Every CVE that names PTC ThingWorx Industrial Connectivity among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2023-29447 CVE record

CVSS 5.7 Medium

Insufficiently Protected Credentials in PTC's Kepware KEPServerEX
- PTC Kepware KEPServerEX
- PTC ThingWorx Kepware Server
- Hard-coded credentials
Not analysed yet 10 Jan 2024
CVE-2023-29446 CVE record

CVSS 4.7 Medium

Improper Input Validation in PTC's Kepware KEPServerEX
- PTC Kepware KEPServerEX
- PTC ThingWorx Kepware Server
- CWE-40
Not analysed yet 10 Jan 2024
CVE-2023-29445 CVE record

CVSS 7.8 High

Uncontrolled Search Path Element in PTC's Kepware KEPServerEX
- PTC Kepware KEPServerEX
- PTC ThingWorx Kepware Server
- CWE-427
Not analysed yet 10 Jan 2024
CVE-2023-29444 CVE record

CVSS 6.3 Medium

Uncontrolled Search Path Element in PTC's Kepware KEPServerEX
- PTC Kepware KEPServerEX
- PTC ThingWorx Kepware Server
- CWE-427
Not analysed yet 10 Jan 2024
CVE-2023-5909 CVE record

CVSS 7.5 High

Improper Validation of Certificate with Host Mismatch in PTC KEPServerEx
- PTC KEPServerEX
- PTC ThingWorx Kepware Server
- Weak cryptography or TLS
Not analysed yet 30 Nov 2023
CVE-2023-5908 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Heap Based Buffer Overflow in PTC KEPServerEx
- PTC KEPServerEX
- PTC ThingWorx Kepware Server
- Memory corruption
Not analysed yet 30 Nov 2023
CVE-2023-0754 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Integer overflow in PTC ThingWorx Edge C-SDK and others
- PTC ThingWorx Edge C-SDK
- Microsoft .NET-SDK
- Memory corruption
Not analysed yet 23 Feb 2023
CVE-2023-0755 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Improper array index validation in PTC ThingWorx Edge C-SDK and others
- PTC ThingWorx Edge C-SDK
- Microsoft .NET-SDK
- CWE-129
Not analysed yet 23 Feb 2023