CVE-2023-0754

The affected products are vulnerable to an integer overflow or wraparound, which could allow an attacker to crash the server and remotely execute arbitrary code...

PTC ThingWorx Edge

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: PTC Equipment: ThingWorx Edge Vulnerabilities: Improper Validation of Array Index, Integer Overflow or Wraparound 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an...

CVE-2023-0754

The affected products are vulnerable to an integer overflow or wraparound, which could allow an attacker to crash the server and remotely execute arbitrary code...

CVE-2023-0754

CVE-2023-0754 concerns an integer overflow in PTC ThingWorx Edge C-SDK (and related components). The vulnerability exists in the parsing path (twHeader_fromStream) where attacker-controlled data can cause an underallocated heap buffer, leading to a heap overflow and potential remote code executio...