CVE-2020-27267CWE-416

CVE-2020-27267: falha em ThingWorx Kepware Server

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Kepware KEPServerEX+ Monitorar KEPServer Enterprise

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 6.0%
KEPServerEX v6.0 to v6.9, ThingWorx Kepware Server v6.8 and v6.9, ThingWorx Industrial Connectivity (all versions), OPC-Aggregator (all versions), Rockwell Automation KEPServer Enterprise, GE Digital Industrial Gateway Server v7.68.804 and v7.66, and Software Toolbox TOP Server all 6.x versions, are vulnerable to a heap-based buffer overflow. Opening a specifically crafted OPC UA message could allow an attacker to crash the server and potentially leak data.
Produtos afetados
n/a · GE Digital Industrial Gateway Servern/a · OPC-Aggregatorn/a · PTC Kepware KEPServerEXn/a · Rockwell Automation KEPServer Enterprisen/a · Software Toolbox TOP Servern/a · ThingWorx Industrial Connectivityn/a · ThingWorx Kepware Server