CVE-2023-5909

KEPServerEX does not properly validate certificates from clients which may allow unauthenticated users to connect...

CVE-2023-5909 Improper Validation of Certificate with Host Mismatch in PTC KEPServerEx

KEPServerEX does not properly validate certificates from clients which may allow unauthenticated users to connect...

CVE-2023-5909

CVE-2023-5909 (part of the CTR/KEPServerEX issue set) concerns improper validation of client certificates with host mismatch in PTC’s KEPServerEX ecosystem. Affected products include KEPServerEX and related Kepware/ThingWorx components, with versions up to 6.14.263.0 and prior. The root cause is ...