Kepware Kepserverex Buffer Error Vulnerability

Kepware Kepserverex is a software application from Kepware USA that communicates with a wide range of industrial equipment. The software supports more than 150 communication protocols and supports the delivery of reliable real-time data to organizations through a single platform. Kepware...

Multiple Kepware Product Buffer Error Vulnerabilities

Kepware Kepserverex is a software application from Kepware USA that communicates with a wide range of industrial equipment. The software supports more than 150 communication protocols and supports the delivery of reliable, real-time data to organizations through a single platform. A buffer error...

PTC Kepware LinkMaster

1. EXECUTIVE SUMMARY CVSS v3 9.3 ATTENTION: Low skill level to exploit Vendor: PTC Equipment: Kepware LinkMaster Vulnerability: Incorrect Default Permissions 2. RISK EVALUATION Successful exploitation of this vulnerability could allow a local attacker to globally overwrite the service...

Kepware LinkMaster Service privilege escalation vulnerability

Talos Vulnerability Report TALOS-2020-1147 Kepware LinkMaster Service privilege escalation vulnerability December 16, 2020 CVE Number CVE-2020-13535 Summary A privilege escalation vulnerability exists in Kepware LinkMaster 3.0.94.0. In its default configuration, an attacker can globally overwrite...

Kepware Linkmaster 权限许可和访问控制问题漏洞

Kepware Linkmaster is the U.S. Kepware company's a Windows platform for industrial applications to support the exchange of data between OPC DA server software. The software provides a method of linking data between OPC servers, thus becoming a common bridge for OPC systems, and OPC servers act as...

Kepware KEPServerEX Detection (Windows SMB Login)

SMB login-based detection of Kepware KEPServerEX. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Kepware Resource Exhaustion Vulnerability

OVERVIEW Adam Crain of Automatak and Chris Sistrunk of Mandiant have identified a resource exhaustion vulnerability in the Kepware Technologies’ DNP Master Driver for the KEPServerEX Communications Platform. Kepware Technologies has produced a new version that mitigates this vulnerability. This...

CVE-2014-0779

The PLC driver in ServerMain.exe in the Kepware KepServerEX 4 component in Schneider Electric StruxureWare SCADA Expert ClearSCADA 2010 R2 build 71.4165, 2010 R2.1 build 71.4325, 2010 R3 build 72.4560, 2010 R3.1 build 72.4644, 2013 R1 build 73.4729, 2013 R1.1 build 73.4832, 2013 R1.1a build...

CVE-2014-0779 Schneider Electric StruxureWare SCADA Expert ClearSCADA Improper Restriction of Operations within the Bounds of a Memory Buffer

The PLC driver in ServerMain.exe in the Kepware KepServerEX 4 component in Schneider Electric StruxureWare SCADA Expert ClearSCADA 2010 R2 build 71.4165, 2010 R2.1 build 71.4325, 2010 R3 build 72.4560, 2010 R3.1 build 72.4644, 2013 R1 build 73.4729, 2013 R1.1 build 73.4832, 2013 R1.1a build...

CVE-2014-0779

The CVE-2014-0779 issue affects the Kepware KepServerEX V4 PLC Driver in the ServerMain.exe component of Schneider Electric StruxureWare SCADA Expert ClearSCADA, impacting multiple release/build combos listed in the NVD entry (2010 R2, 2010 R2.1, 2010 R3, 2010 R3.1, 2013 R1, 2013 R1.1, 2013 R1.1a...

CVE-2013-2789

The Kepware DNP Master Driver for the KEPServerEX Communications Platform before 5.12.140.0 allows remote attackers to cause a denial of service master-station infinite loop via crafted DNP3 packets to TCP port 20000 and allows physically proximate attackers to cause a denial of service...

Code injection

The Kepware DNP Master Driver for the KEPServerEX Communications Platform before 5.12.140.0 allows remote attackers to cause a denial of service master-station infinite loop via crafted DNP3 packets to TCP port 20000 and allows physically proximate attackers to cause a denial of service...

CVE-2013-2789

The CVE covers Kepware’s DNP Master Driver for KEPServerEX (pre-5.12.140.0). The vulnerability is an improper input validation in the DNP3 handling on TCP port 20000 and via serial input, which can cause a master station infinite loop and denial of service. Public advisories confirm update to ver...

CVE-2013-2789

The Kepware DNP Master Driver for the KEPServerEX Communications Platform before 5.12.140.0 allows remote attackers to cause a denial of service master-station infinite loop via crafted DNP3 packets to TCP port 20000 and allows physically proximate attackers to cause a denial of service...

KLA10235 DoS vulnerability in Kepware KEPServerEX

An unspecified vulnerability was found in KEPServerEX. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited remotely via a specially designed DNP3 packet. Original advisories - Related products Kepware-EX CVE list CVE-2013-2789 high...

Kepware Technologies Improper Input Validation Vulnerability

OVERVIEW Adam Crain of Automatak and independent researcher Chris Sistrunk have identified a improper input validation vulnerability in the Kepware Technologies’ DNP Master Driver for the KEPServerEX Communications Platform. Kepware Technologies has produced a new version that mitigates this...