CVE-2023-0755

🗓️ 23 Feb 2023 21:23:19Reported by icscertType

cve🔗 web.nvd.nist.gov👁 81 Views🌐 WEB

CVE-2023-0755: Improper array index validatio

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2023-0755	24 Feb 202300:48	–	circl
CNNVD	PTC ThingWorx Edge输入验证错误漏洞	23 Feb 202300:00	–	cnnvd
Cvelist	CVE-2023-0755	23 Feb 202321:23	–	cvelist
EUVD	EUVD-2023-12773	3 Oct 202520:07	–	euvd
ICS	PTC ThingWorx Edge	27 Feb 202320:46	–	ics
NVD	CVE-2023-0755	23 Feb 202322:15	–	nvd
OSV	CVE-2023-0755	23 Feb 202322:15	–	osv
Prion	Input validation	23 Feb 202322:15	–	prion
Positive Technologies	PT-2023-16504 · Softwarex · Softwarex	23 Feb 202300:00	–	ptsecurity
Source Incite	SRC-2023-0002 : PTC Thingworx Edge C-SDK mulitpartMessageStoreEntry_Create Array Indexing Out-of-Bounds Write Remote Code Execution Vulnerability	29 Mar 202200:00	–	srcincite

NVD

Vulners

Node

ge digital_industrial_gateway_serverRange≤7.612

ptc kepware_serverRange≤6.12

ptc kepware_serverexRange≤6.12

ptc thingworx_.net-sdkRange≤5.8.4.971

ptc thingworx_edge_c-sdkRange≤2.2.12.1052

ptc thingworx_edge_microserverRange≤5.4.10.0

ptc thingworx_industrial_connectivityMatch-

ptc thingworx_kepware_edgeRange≤1.5

rockwellautomation kepserver_enterpriseRange≤6.12

[
  {
    "defaultStatus": "unaffected",
    "product": "ThingWorx Edge C-SDK",
    "vendor": "PTC",
    "versions": [
      {
        "lessThanOrEqual": "v2.2.12.1052 ",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": ".NET-SDK",
    "vendor": "Microsoft",
    "versions": [
      {
        "lessThanOrEqual": "v5.8.4.971 ",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "ThingWorx Edge MicroServer (EMS)",
    "vendor": "PTC",
    "versions": [
      {
        "lessThanOrEqual": "v5.4.10.0 ",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Kepware KEPServerEX",
    "vendor": "PTC",
    "versions": [
      {
        "lessThanOrEqual": "v6.12 ",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "ThingWorx Kepware Server ",
    "vendor": "PTC",
    "versions": [
      {
        "lessThanOrEqual": "v6.12 ",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "ThingWorx Industrial Connectivity",
    "vendor": "PTC",
    "versions": [
      {
        "status": "affected",
        "version": "All Versions "
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "ThingWorx Kepware Edge",
    "vendor": "PTC",
    "versions": [
      {
        "lessThanOrEqual": "v1.5",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "KEPServer Enterprise ",
    "vendor": "Rockwell Automation ",
    "versions": [
      {
        "lessThanOrEqual": "v6.12",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Digital Industrial Gateway Server ",
    "vendor": "General Electric ",
    "versions": [
      {
        "lessThanOrEqual": "v7.612",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
cisa	www.cisa.gov/uscert/ics/advisories/icsa-23-054-01

Parameter	Position	Path	Description	CWE
chunkCount	binary	/Thingworx/WS	Out-of-bounds write in multipart message handling (mulitpartMessageStoreEntry_Create) can be triggered by attacker-controlled chunkId causing remote code execution.	CWE-129
chunkSize	binary	/Thingworx/WS	Out-of-bounds write in multipart message handling (mulitpartMessageStoreEntry_Create) can be triggered by attacker-controlled chunkId causing remote code execution.	CWE-129
chunkId	binary	/Thingworx/WS	Out-of-bounds write in multipart message handling (mulitpartMessageStoreEntry_Create) can be triggered by attacker-controlled chunkId causing remote code execution.	CWE-129
msg	binary	/Thingworx/WS	Out-of-bounds write in multipart message handling (mulitpartMessageStoreEntry_Create) can be triggered by attacker-controlled chunkId causing remote code execution.	CWE-129

21 Nov 2024 07:37Current

9.5High risk

Vulners AI Score9.5

CVSS 3.19.8

EPSS0.08179

SSVC

CWE-129