CVE-2022-2825

2023-03-2919:15:11

CWE-121

[email protected]

web.nvd.nist.gov

cve-2022-2825

vulnerability

remote code execution

kepware kepserverex

arbitrary code

text encoding

stack-based buffer

zdi-can-18411

nvd

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

0.004 Low

EPSS

Percentile

72.7%

JSON

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kepware KEPServerEX 6.11.718.0. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of text encoding conversions. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-18411.

Affected configurations

Vulners

NVD

Node

kepwarekepserverexRange≤6.11.718.0

CPENameOperatorVersion
ge:industrial_gateway_serverge industrial gateway serverlt7.612
ptc:kepware_kepserverexptc kepware kepserverexlt6.12
ptc:opc-aggregatorptc opc-aggregatorlt6.12
ptc:thingworx_industrial_connectivityptc thingworx industrial connectivityeq-
ptc:thingworx_kepware_edgeptc thingworx kepware edgelt1.4
ptc:thingworx_kepware_serverptc thingworx kepware serverlt6.12
rockwellautomation:kepserver_enterpriserockwellautomation kepserver enterpriselt6.12
softwaretoolbox:top_serversoftwaretoolbox top serverlt6.12

CPE	Name	Operator	Version
ge:industrial_gateway_server	ge industrial gateway server	lt	7.612
ptc:kepware_kepserverex	ptc kepware kepserverex	lt	6.12
ptc:opc-aggregator	ptc opc-aggregator	lt	6.12
ptc:thingworx_industrial_connectivity	ptc thingworx industrial connectivity	eq	-
ptc:thingworx_kepware_edge	ptc thingworx kepware edge	lt	1.4
ptc:thingworx_kepware_server	ptc thingworx kepware server	lt	6.12
rockwellautomation:kepserver_enterprise	rockwellautomation kepserver enterprise	lt	6.12
softwaretoolbox:top_server	softwaretoolbox top server	lt	6.12

CNA Affected

[
  {
    "vendor": "Kepware",
    "product": "KEPServerEX",
    "versions": [
      {
        "version": "6.11.718.0",
        "status": "affected"
      }
    ]
  }
]