CVE-2023-0754criticalCWE-190

CVE-2023-0754: falha crítica em General Electric Digital Industrial Gateway…

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Kepware KEPServerEX+ Monitorar ThingWorx Industrial Connectivity

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

28Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 9.8epss 2.9%
The affected products are vulnerable to an integer overflow or wraparound, which could  allow an attacker to crash the server and remotely execute arbitrary code.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
General Electric · Digital Industrial Gateway ServerMicrosoft · .NET-SDKPTC · Kepware KEPServerEXPTC · ThingWorx Edge C-SDKPTC · ThingWorx Edge MicroServer (EMS)PTC · ThingWorx Industrial ConnectivityPTC · ThingWorx Kepware EdgePTC · ThingWorx Kepware ServerRockwell Automation · KEPServer Enterprise
CVEs relacionadas — General Electric Digital Industrial Gateway…

No mesmo produto, das mais perigosas para as menos.

CVE-2023-0755CRITICALCVE-2023-0755EPSS 11.8%CVE-2024-6098MEDIUMPTC Kepware ThingWorx Kepware Server Allocation of Resources Without Limits or ThrottlingEPSS 0.4%CVE-2023-29447MEDIUMInsufficiently Protected Credentials in PTC's Kepware KEPServerEXEPSS 0.4%CVE-2023-29446MEDIUMImproper Input Validation in PTC's Kepware KEPServerEXEPSS 0.2%CVE-2023-29445HIGHUncontrolled Search Path Element in PTC's Kepware KEPServerEXEPSS 0.2%CVE-2023-29444MEDIUMUncontrolled Search Path Element in PTC's Kepware KEPServerEXEPSS 0.2%