Advisories · Technology

PTC ThingWorx Kepware Edge.

Every CVE that names PTC ThingWorx Kepware Edge among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2023-5909 CVE record

CVSS 7.5 High

Improper Validation of Certificate with Host Mismatch in PTC KEPServerEx
- PTC KEPServerEX
- PTC ThingWorx Kepware Server
- Weak cryptography or TLS
Not analysed yet 30 Nov 2023
CVE-2023-5908 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Heap Based Buffer Overflow in PTC KEPServerEx
- PTC KEPServerEX
- PTC ThingWorx Kepware Server
- Memory corruption
Not analysed yet 30 Nov 2023
CVE-2023-0754 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Integer overflow in PTC ThingWorx Edge C-SDK and others
- PTC ThingWorx Edge C-SDK
- Microsoft .NET-SDK
- Memory corruption
Not analysed yet 23 Feb 2023
CVE-2023-0755 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Improper array index validation in PTC ThingWorx Edge C-SDK and others
- PTC ThingWorx Edge C-SDK
- Microsoft .NET-SDK
- CWE-129
Not analysed yet 23 Feb 2023