Softwaretoolbox Top Out-of-bounds Write

2021-08-1000:00:00

www.tenable.com

0.016 Low

EPSS

Percentile

87.3%

JSON

KEPServerEX v6.0 to v6.9, ThingWorx Kepware Server v6.8 and v6.9, ThingWorx Industrial Connectivity (all versions), OPC-Aggregator (all versions), Rockwell Automation KEPServer Enterprise, GE Digital Industrial Gateway Server v7.68.804 and v7.66, and Software Toolbox TOP Server all 6.x versions, are vulnerable to a heap-based buffer overflow. Opening a specifically crafted OPC UA message could allow an attacker to crash the server and potentially leak data.

File data ot_500408.nasl

VendorProductVersionCPE
softwaretoolboxtop_server*cpe:2.3:a:softwaretoolbox:top_server:*:*:*:*:*:*:*:*
geindustrial_gateway_server7.66cpe:2.3:a:ge:industrial_gateway_server:7.66:*:*:*:*:*:*:*
geindustrial_gateway_server7.68.804cpe:2.3:a:ge:industrial_gateway_server:7.68.804:*:*:*:*:*:*:*
ptckepware_kepserverex6.0cpe:2.3:a:ptc:kepware_kepserverex:6.0:*:*:*:*:*:*:*
ptckepware_kepserverex6.9cpe:2.3:a:ptc:kepware_kepserverex:6.9:*:*:*:*:*:*:*
ptcopc-aggregator-cpe:2.3:a:ptc:opc-aggregator:-:*:*:*:*:*:*:*
ptcthingworx_industrial_connectivity-cpe:2.3:a:ptc:thingworx_industrial_connectivity:-:*:*:*:*:*:*:*
ptcthingworx_kepware_server6.8cpe:2.3:a:ptc:thingworx_kepware_server:6.8:*:*:*:*:*:*:*
ptcthingworx_kepware_server6.9cpe:2.3:a:ptc:thingworx_kepware_server:6.9:*:*:*:*:*:*:*
rockwellautomationkepserver_enterprise6.6.504.0cpe:2.3:a:rockwellautomation:kepserver_enterprise:6.6.504.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
softwaretoolbox	top_server	*	cpe:2.3:a:softwaretoolbox:top_server::::::::
ge	industrial_gateway_server	7.66	cpe:2.3:a:ge:industrial_gateway_server:7.66:::::::*
ge	industrial_gateway_server	7.68.804	cpe:2.3:a:ge:industrial_gateway_server:7.68.804:::::::*
ptc	kepware_kepserverex	6.0	cpe:2.3:a:ptc:kepware_kepserverex:6.0:::::::*
ptc	kepware_kepserverex	6.9	cpe:2.3:a:ptc:kepware_kepserverex:6.9:::::::*
ptc	opc-aggregator	-	cpe:2.3:a:ptc:opc-aggregator:-:::::::*
ptc	thingworx_industrial_connectivity	-	cpe:2.3:a:ptc:thingworx_industrial_connectivity:-:::::::*
ptc	thingworx_kepware_server	6.8	cpe:2.3:a:ptc:thingworx_kepware_server:6.8:::::::*
ptc	thingworx_kepware_server	6.9	cpe:2.3:a:ptc:thingworx_kepware_server:6.9:::::::*
rockwellautomation	kepserver_enterprise	6.6.504.0	cpe:2.3:a:rockwellautomation:kepserver_enterprise:6.6.504.0:::::::*