CVE-2023-0755

CVE-2023-0755 maps to a PTC ThingWorx Edge C-SDK vulnerability (and related components) caused by improper validation of array index, leading to potential remote code execution and server crash. Affected products (per ICSA/CISA and related sources) include ThingWorx Edge C-SDK (versions up to 2.2...

CVE-2023-0754

CVE-2023-0754 concerns an integer overflow in PTC ThingWorx Edge C-SDK (and related components). The vulnerability exists in the parsing path (twHeader_fromStream) where attacker-controlled data can cause an underallocated heap buffer, leading to a heap overflow and potential remote code executio...