CVE-2020-13535

A privilege escalation vulnerability exists in Kepware LinkMaster 3.0.94.0. In its default configuration, an attacker can globally overwrite service configuration to execute arbitrary code with NT SYSTEM privileges...

CVE-2020-13535

Kepware LinkMaster 3.0.94.0 has a privilege-escalation flaw (CVE-2020-13535) due to Incorrect Default Permissions (CWE-276). The service allows Everyone/SYSTEM-level access to change SERVICE_CONFIG, enabling a local attacker to re-point the LinkMaster service to an arbitrary executable and run wi...

CVE-2020-13535: Incorrect Default Permissions

A privilege escalation vulnerability exists in Kepware LinkMaster 3.0.94.0. In its default configuration, an attacker can globally overwrite service configuration to execute arbitrary code with NT SYSTEM privileges...

PT-2020-13608 · Kepware · Kepware Linkmaster

Name of the Vulnerable Software and Affected Versions: Kepware LinkMaster version 3.0.94.0 Description: A privilege escalation issue exists, allowing an attacker to globally overwrite service configuration and execute arbitrary code with NT SYSTEM privileges in the default configuration...

Kepware Linkmaster Permission License and Access Control Issues Vulnerability

Kepware Linkmaster is the U.S. Kepware company's a Windows platform for industrial applications to support the exchange of data between OPC DA server software. The software provides a method of linking data between OPC servers, thus becoming a common bridge for OPC systems, and OPC servers act as...

Kepware Kepserverex Buffer Error Vulnerability

Kepware Kepserverex is a software application from Kepware USA that communicates with a wide range of industrial equipment. The software supports more than 150 communication protocols and supports the delivery of reliable, real-time data to organizations through a single platform. A buffer error...

PTC Kepware KEPServerEX (Update A)

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: PTC Equipment: Kepware KEPServerEX Vulnerabilities: Stack-based Buffer Overflow, Heap-based Buffer Overflow, Use After Free 2. UPDATE INFORMATION This updated advisory is a follow-up to the...

Multiple Kepware Product Buffer Error Vulnerabilities

Kepware Kepserverex is a software application from Kepware USA that communicates with a wide range of industrial equipment. The software supports more than 150 communication protocols and supports the delivery of reliable, real-time data to organizations through a single platform. A buffer error...

Kepware Kepserverex Buffer Error Vulnerability

Kepware Kepserverex is a software application from Kepware USA that communicates with a wide range of industrial equipment. The software supports more than 150 communication protocols and supports the delivery of reliable real-time data to organizations through a single platform. Kepware...

PTC Kepware LinkMaster

1. EXECUTIVE SUMMARY CVSS v3 9.3 ATTENTION: Low skill level to exploit Vendor: PTC Equipment: Kepware LinkMaster Vulnerability: Incorrect Default Permissions 2. RISK EVALUATION Successful exploitation of this vulnerability could allow a local attacker to globally overwrite the service...

Kepware Linkmaster 权限许可和访问控制问题漏洞

Kepware Linkmaster is the U.S. Kepware company's a Windows platform for industrial applications to support the exchange of data between OPC DA server software. The software provides a method of linking data between OPC servers, thus becoming a common bridge for OPC systems, and OPC servers act as...

Kepware LinkMaster Service privilege escalation vulnerability

Talos Vulnerability Report TALOS-2020-1147 Kepware LinkMaster Service privilege escalation vulnerability December 16, 2020 CVE Number CVE-2020-13535 Summary A privilege escalation vulnerability exists in Kepware LinkMaster 3.0.94.0. In its default configuration, an attacker can globally overwrite...

Kepware KEPServerEX Detection (Windows SMB Login)

SMB login-based detection of Kepware KEPServerEX. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Kepware Resource Exhaustion Vulnerability

OVERVIEW Adam Crain of Automatak and Chris Sistrunk of Mandiant have identified a resource exhaustion vulnerability in the Kepware Technologies’ DNP Master Driver for the KEPServerEX Communications Platform. Kepware Technologies has produced a new version that mitigates this vulnerability. This...

CVE-2014-0779

The PLC driver in ServerMain.exe in the Kepware KepServerEX 4 component in Schneider Electric StruxureWare SCADA Expert ClearSCADA 2010 R2 build 71.4165, 2010 R2.1 build 71.4325, 2010 R3 build 72.4560, 2010 R3.1 build 72.4644, 2013 R1 build 73.4729, 2013 R1.1 build 73.4832, 2013 R1.1a build...

CVE-2014-0779 Schneider Electric StruxureWare SCADA Expert ClearSCADA Improper Restriction of Operations within the Bounds of a Memory Buffer

The PLC driver in ServerMain.exe in the Kepware KepServerEX 4 component in Schneider Electric StruxureWare SCADA Expert ClearSCADA 2010 R2 build 71.4165, 2010 R2.1 build 71.4325, 2010 R3 build 72.4560, 2010 R3.1 build 72.4644, 2013 R1 build 73.4729, 2013 R1.1 build 73.4832, 2013 R1.1a build...

CVE-2014-0779

The CVE-2014-0779 issue affects the Kepware KepServerEX V4 PLC Driver in the ServerMain.exe component of Schneider Electric StruxureWare SCADA Expert ClearSCADA, impacting multiple release/build combos listed in the NVD entry (2010 R2, 2010 R2.1, 2010 R3, 2010 R3.1, 2013 R1, 2013 R1.1, 2013 R1.1a...

CVE-2013-2789

The Kepware DNP Master Driver for the KEPServerEX Communications Platform before 5.12.140.0 allows remote attackers to cause a denial of service master-station infinite loop via crafted DNP3 packets to TCP port 20000 and allows physically proximate attackers to cause a denial of service...

Code injection

The Kepware DNP Master Driver for the KEPServerEX Communications Platform before 5.12.140.0 allows remote attackers to cause a denial of service master-station infinite loop via crafted DNP3 packets to TCP port 20000 and allows physically proximate attackers to cause a denial of service...

CVE-2013-2789

The CVE covers Kepware’s DNP Master Driver for KEPServerEX (pre-5.12.140.0). The vulnerability is an improper input validation in the DNP3 handling on TCP port 20000 and via serial input, which can cause a master station infinite loop and denial of service. Public advisories confirm update to ver...