CVE-2020-27267

KEPServerEX v6.0 to v6.9, ThingWorx Kepware Server v6.8 and v6.9, ThingWorx Industrial Connectivity all versions, OPC-Aggregator all versions, Rockwell Automation KEPServer Enterprise, GE Digital Industrial Gateway Server v7.68.804 and v7.66, and Software Toolbox TOP Server all 6.x versions, are...

CVE-2020-27265: Stack-based Buffer Overflow

KEPServerEX: v6.0 to v6.9, ThingWorx Kepware Server: v6.8 and v6.9, ThingWorx Industrial Connectivity: All versions, OPC-Aggregator: All versions, Rockwell Automation KEPServer Enterprise, GE Digital Industrial Gateway Server: v7.68.804 and v7.66, Software Toolbox TOP Server: All 6.x versions are...

CVE-2020-27267: Use After Free

KEPServerEX v6.0 to v6.9, ThingWorx Kepware Server v6.8 and v6.9, ThingWorx Industrial Connectivity all versions, OPC-Aggregator all versions, Rockwell Automation KEPServer Enterprise, GE Digital Industrial Gateway Server v7.68.804 and v7.66, and Software Toolbox TOP Server all 6.x versions, are...

CVE-2020-27263: Heap-based Buffer Overflow

KEPServerEX: v6.0 to v6.9, ThingWorx Kepware Server: v6.8 and v6.9, ThingWorx Industrial Connectivity: All versions, OPC-Aggregator: All versions, Rockwell Automation KEPServer Enterprise, GE Digital Industrial Gateway Server: v7.68.804 and v7.66, Software Toolbox TOP Server: All 6.x versions, ar...

PT-2020-6948

Name of the Vulnerable Software and Affected Versions KEPServerEX versions 6.0 through 6.9 ThingWorx Kepware Server versions 6.8 through 6.9 ThingWorx Industrial Connectivity versions prior to a fixed version OPC-Aggregator versions prior to a fixed version Rockwell Automation KEPServer Enterpris...

PT-2020-6946

Name of the Vulnerable Software and Affected Versions KEPServerEX versions 6.0 through 6.9 ThingWorx Kepware Server versions 6.8 through 6.9 ThingWorx Industrial Connectivity affected versions not specified OPC-Aggregator affected versions not specified Rockwell Automation KEPServer Enterprise...

PT-2020-6947

Name of the Vulnerable Software and Affected Versions KEPServerEX versions 6.0 through 6.9 ThingWorx Kepware Server versions 6.8 through 6.9 ThingWorx Industrial Connectivity all versions OPC-Aggregator all versions Rockwell Automation KEPServer Enterprise affected versions not specified GE Digit...

PTC Kepware KEPServerEX (Update A)

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: PTC Equipment: Kepware KEPServerEX Vulnerabilities: Stack-based Buffer Overflow, Heap-based Buffer Overflow, Use After Free 2. UPDATE INFORMATION This updated advisory is a follow-up to the...

CVE-2020-25179

GE Healthcare Imaging and Ultrasound Products may allow specific credentials to be exposed during transport over the network...

CVE-2020-25175

GE Healthcare Imaging and Ultrasound Products may allow specific credentials to be exposed during transport over the network...

Code injection

GE Healthcare Imaging and Ultrasound Products may allow specific credentials to be exposed during transport over the network...

CVE-2020-25175

GE Healthcare Imaging and Ultrasound Products may allow specific credentials to be exposed during transport over the network...

CVE-2020-25175

CVE-2020-25175 affects GE Healthcare Imaging and Ultrasound Products. The flaw is unprotected transport of credentials (CWE-523), enabling credentials to be exposed over the network. Connected documentation confirms affected GE product lines across modalities (MR, Ultrasound, X-Ray, etc.) and lis...

CVE-2020-25179

GE Healthcare Imaging and Ultrasound Products may allow specific credentials to be exposed during transport over the network...

CVE-2020-25179

CVE-2020-25179 affects GE Healthcare Imaging and Ultrasound Products. The issue involves unprotected transport of credentials and exposure of sensitive system information to an unauthorized control sphere, enabling credential exposure during network transport. Impact described in ICS advisory inc...

CVE-2020-25175: Unprotected Transport of Credentials

GE Healthcare Imaging and Ultrasound Products may allow specific credentials to be exposed during transport over the network...

CVE-2020-25179: Exposure of Sensitive System Information to an Unauthorized Control Sphere

GE Healthcare Imaging and Ultrasound Products may allow specific credentials to be exposed during transport over the network...

PT-2020-15997

Name of the Vulnerable Software and Affected Versions GE Healthcare Imaging and Ultrasound Products affected versions not specified Description The issue concerns the exposure of specific credentials during transport over the network. Recommendations At the moment, there is no information about a...

Critical, Unpatched Bug Opens GE Radiological Devices to Remote Code Execution

A pair of critical vulnerabilities have been discovered in dozens of GE Healthcare radiological devices popular in hospitals, which could allow an attacker to gain access to sensitive personal health information PHI, alter data and even shut the machine’s availability down. The flaws affect 100...

PT-2020-5735

Name of the Vulnerable Software and Affected Versions: GE Healthcare Imaging and Ultrasound Products affected versions not specified Description: The issue is related to the exposure of specific credentials during transport over the network due to a lack of protection for service data. This could...