The vulnerability of Kepware OPC-server software from Kepware KEPServerEX and ThingWorkx Kepware Server lies in the insufficient validation of input data, allowing attackers to access confidential information.

The vulnerability of the OPC-server software from Kepware, KEPServerEX, and ThingWorkx Kepware Server, lies in insufficient validation of input data. Exploiting this vulnerability can allow attackers to access confidential information by loading any arbitrary project file...