CVE-2022-2848

🗓️ 29 Mar 2023 00:00:00Reported by zdiType

Vulnerability in Kepware KEPServerEX 6.11.718.0 allows remote code execution

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2022-2848	29 Mar 202322:28	–	circl
CNNVD	Kepware KEPServerEX 缓冲区错误漏洞	30 Aug 202200:00	–	cnnvd
Cvelist	CVE-2022-2848	29 Mar 202300:00	–	cvelist
EUVD	EUVD-2022-35082	3 Oct 202520:07	–	euvd
NVD	CVE-2022-2848	29 Mar 202319:15	–	nvd
OSV	CVE-2022-2848	29 Mar 202319:15	–	osv
Prion	Heap overflow	29 Mar 202319:15	–	prion
Positive Technologies	PT-2022-4524 · Kepware · Kepserverex	30 Aug 202200:00	–	ptsecurity
RedhatCVE	CVE-2022-2848	5 Feb 202521:18	–	redhatcve
Vulnrichment	CVE-2022-2848	29 Mar 202300:00	–	vulnrichment

NVD

Vulners

Node

ge industrial_gateway_serverRange<7.612

ptc kepware_kepserverexRange<6.12

ptc opc-aggregatorRange<6.12

ptc thingworx_industrial_connectivityMatch-

ptc thingworx_kepware_edgeRange<1.4

ptc thingworx_kepware_serverRange<6.12

rockwellautomation kepserver_enterpriseRange<6.12

softwaretoolbox top_serverRange<6.12

[
  {
    "vendor": "Kepware",
    "product": "KEPServerEX",
    "versions": [
      {
        "version": "6.11.718.0",
        "status": "affected"
      }
    ]
  }
]

Source	Link
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-22-1454/
cisa	www.cisa.gov/uscert/ics/advisories/icsa-22-242-10

18 Feb 2025 17:15Current

9.4High risk

Vulners AI Score9.4

CVSS 3.19.1

CVSS 39.1

EPSS0.01151

SSVC