CVE-2023-0754

🗓️ 23 Feb 2023 21:27:09Reported by icscertType

cve🔗 web.nvd.nist.gov👁 67 Views🌐 WEB

Vulnerability in affected products leads to remote code execution

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2023-0754	24 Feb 202300:48	–	circl
CNNVD	PTC ThingWorx Edge输入验证错误漏洞	23 Feb 202300:00	–	cnnvd
Cvelist	CVE-2023-0754	23 Feb 202321:27	–	cvelist
EUVD	EUVD-2023-12772	3 Oct 202520:07	–	euvd
ICS	PTC ThingWorx Edge	27 Feb 202320:46	–	ics
NVD	CVE-2023-0754	23 Feb 202322:15	–	nvd
Prion	Integer overflow	23 Feb 202322:15	–	prion
Positive Technologies	PT-2023-16503 · Microsoft +4 · .Net Sdk +10	23 Feb 202300:00	–	ptsecurity
RedhatCVE	CVE-2023-0754	23 May 202504:40	–	redhatcve
Source Incite	SRC-2023-0001 : PTC Thingworx Edge C-SDK twHeader_fromStream Integer Overflow Remote Code Execution Vulnerability	29 Mar 202200:00	–	srcincite

NVD

Vulners

Node

ge digital_industrial_gateway_serverRange≤7.612

ptc kepware_serverRange≤6.12

ptc kepware_serverexRange≤6.12

ptc thingworx_.net-sdkRange≤5.8.4.971

ptc thingworx_edge_c-sdkRange≤2.2.12.1052

ptc thingworx_edge_microserverRange≤5.4.10.0

ptc thingworx_industrial_connectivity

ptc thingworx_kepware_edgeRange≤1.5

rockwellautomation kepserver_enterpriseRange≤6.12

[
  {
    "defaultStatus": "unaffected",
    "product": "ThingWorx Edge C-SDK",
    "vendor": "PTC",
    "versions": [
      {
        "lessThanOrEqual": "v2.2.12.1052 ",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": ".NET-SDK",
    "vendor": "Microsoft",
    "versions": [
      {
        "lessThanOrEqual": "v5.8.4.971 ",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "ThingWorx Edge MicroServer (EMS)",
    "vendor": "PTC",
    "versions": [
      {
        "lessThanOrEqual": "v5.4.10.0 ",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Kepware KEPServerEX",
    "vendor": "PTC",
    "versions": [
      {
        "lessThanOrEqual": "v6.12 ",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "ThingWorx Kepware Server ",
    "vendor": "PTC",
    "versions": [
      {
        "lessThanOrEqual": "v6.12 ",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "ThingWorx Industrial Connectivity",
    "vendor": "PTC",
    "versions": [
      {
        "status": "affected",
        "version": "All Versions "
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "ThingWorx Kepware Edge",
    "vendor": "PTC",
    "versions": [
      {
        "lessThanOrEqual": "v1.5",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "KEPServer Enterprise ",
    "vendor": "Rockwell Automation ",
    "versions": [
      {
        "lessThanOrEqual": "v6.12",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Digital Industrial Gateway Server ",
    "vendor": "General Electric ",
    "versions": [
      {
        "lessThanOrEqual": "v7.612",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
cisa	www.cisa.gov/uscert/ics/advisories/icsa-23-054-01

Parameter	Position	Path	Description	CWE
Sec-WebSocket-Key	path	Thingworx/WS	Integer overflow in twHeader_fromStream during parsing of multipart messages over Thingworx WebSocket at /Thingworx/WS can lead to heap corruption and potential remote code execution.	CWE-190
Content-Length	path	Thingworx/WS	Integer overflow in twHeader_fromStream during parsing of multipart messages over Thingworx WebSocket at /Thingworx/WS can lead to heap corruption and potential remote code execution.	CWE-190
Sec-WebSocket-Accept	path	Thingworx/WS	Integer overflow in twHeader_fromStream during parsing of multipart messages over Thingworx WebSocket at /Thingworx/WS can lead to heap corruption and potential remote code execution.	CWE-190

21 Nov 2024 07:37Current

9.3High risk

Vulners AI Score9.3

CVSS 3.19.8

EPSS0.00717

SSVC

CWE-190