KEPServerEX: v6.0 to v6.9, ThingWorx Kepware Server: v6.8 and v6.9, ThingWorx Industrial Connectivity: All versions, OPC-Aggregator: All versions, Rockwell Automation KEPServer Enterprise, GE Digital Industrial Gateway Server: v7.68.804 and v7.66, Software Toolbox TOP Server: All 6.x versions, are vulnerable to a heap-based buffer overflow. Opening a specifically crafted OPC UA message could allow an attacker to crash the server and potentially leak data.
File data ot_500463.nasl
Vendor | Product | Version | CPE |
---|---|---|---|
softwaretoolbox | top_server | * | cpe:2.3:a:softwaretoolbox:top_server:*:*:*:*:*:*:*:* |
ge | industrial_gateway_server | 7.66 | cpe:2.3:a:ge:industrial_gateway_server:7.66:*:*:*:*:*:*:* |
ge | industrial_gateway_server | 7.68.804 | cpe:2.3:a:ge:industrial_gateway_server:7.68.804:*:*:*:*:*:*:* |
ptc | kepware_kepserverex | 6.0 | cpe:2.3:a:ptc:kepware_kepserverex:6.0:*:*:*:*:*:*:* |
ptc | kepware_kepserverex | 6.9 | cpe:2.3:a:ptc:kepware_kepserverex:6.9:*:*:*:*:*:*:* |
ptc | opc-aggregator | - | cpe:2.3:a:ptc:opc-aggregator:-:*:*:*:*:*:*:* |
ptc | thingworx_industrial_connectivity | - | cpe:2.3:a:ptc:thingworx_industrial_connectivity:-:*:*:*:*:*:*:* |
ptc | thingworx_kepware_server | 6.8 | cpe:2.3:a:ptc:thingworx_kepware_server:6.8:*:*:*:*:*:*:* |
ptc | thingworx_kepware_server | 6.9 | cpe:2.3:a:ptc:thingworx_kepware_server:6.9:*:*:*:*:*:*:* |
rockwellautomation | kepserver_enterprise | 6.6.504.0 | cpe:2.3:a:rockwellautomation:kepserver_enterprise:6.6.504.0:*:*:*:*:*:*:* |