Code injection

2023-11-3022:15:00

PRIOn knowledge base

www.prio-n.com

code injection

kepserverex

vulnerability

unauthenticated users

nvd

7.2 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

27.1%

JSON

KEPServerEX does not properly validate certificates from clients which may allow unauthenticated users to connect.

CPENameOperatorVersion
industrial_gateway_serverle7.614
keepserverexle6.14.263.0
opc-aggregatorle6.14
thingworx_kepware_edgele1.7
thingworx_kepware_serverle6.14.263.0
kepserver_enterprisele6.14.263.0
top_serverle6.14.263.0

Name	Operator	Version
industrial_gateway_server	le	7.614
keepserverex	le	6.14.263.0
opc-aggregator	le	6.14
thingworx_kepware_edge	le	1.7
thingworx_kepware_server	le	6.14.263.0
kepserver_enterprise	le	6.14.263.0
top_server	le	6.14.263.0

References

www.cisa.gov/news-events/ics-advisories/icsa-23-334-03