CVE-2023-0755

CVE-2023-0755 maps to a PTC ThingWorx Edge C-SDK vulnerability (and related components) caused by improper validation of array index, leading to potential remote code execution and server crash. Affected products (per ICSA/CISA and related sources) include ThingWorx Edge C-SDK (versions up to 2.2...

CVE-2023-5908

CVE-2023-5908 affects PTC Kepware’s KEPServerEX (and related Kepware products) with a heap-based buffer overflow vulnerability. Affected versions include KEPServerEX v6.14.263.0 and older. The issue could allow an attacker to crash the target or leak information on a network without authenticatio...

CVE-2022-2825

The CVE-2022-2825 issue affects Kepware KEPServerEX 6.11.718.0, with a stack-based buffer overflow in the handling of text encoding conversions caused by improper validation of the length of user-supplied data. It allows remote attackers to execute arbitrary code with SYSTEM privileges without au...

CVE-2023-0754

CVE-2023-0754 concerns an integer overflow in PTC ThingWorx Edge C-SDK (and related components). The vulnerability exists in the parsing path (twHeader_fromStream) where attacker-controlled data can cause an underallocated heap buffer, leading to a heap overflow and potential remote code executio...

CVE-2022-2848

CVE-2022-2848 affects Kepware KEPServerEX 6.11.718.0. A heap-based buffer overflow occurs during handling of text encoding conversions due to improper length validation of user-supplied data, allowing remote code execution in the context of SYSTEM. The vulnerability is network-exploitable with no...

CVE-2023-5909

CVE-2023-5909 (part of the CTR/KEPServerEX issue set) concerns improper validation of client certificates with host mismatch in PTC’s KEPServerEX ecosystem. Affected products include KEPServerEX and related Kepware/ThingWorx components, with versions up to 6.14.263.0 and prior. The root cause is ...