CVE-2023-0755: falha crítica em General Electric Digital Industrial Gateway…
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
33Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 9.8epss 12%
The affected products are vulnerable to an improper validation of array index, which could allow an attacker to crash the server and remotely execute arbitrary code.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
General Electric · Digital Industrial Gateway ServerMicrosoft · .NET-SDKPTC · Kepware KEPServerEXPTC · ThingWorx Edge C-SDKPTC · ThingWorx Edge MicroServer (EMS)PTC · ThingWorx Industrial ConnectivityPTC · ThingWorx Kepware EdgePTC · ThingWorx Kepware ServerRockwell Automation · KEPServer EnterpriseCVEs relacionadas — General Electric Digital Industrial Gateway…
No mesmo produto, das mais perigosas para as menos.
CVE-2023-0754CRITICALCVE-2023-0754EPSS 2.9%CVE-2024-6098MEDIUMPTC Kepware ThingWorx Kepware Server Allocation of Resources Without Limits or ThrottlingEPSS 0.4%CVE-2023-29447MEDIUMInsufficiently Protected Credentials in PTC's Kepware KEPServerEXEPSS 0.4%CVE-2023-29446MEDIUMImproper Input Validation in PTC's Kepware KEPServerEXEPSS 0.2%CVE-2023-29445HIGHUncontrolled Search Path Element in PTC's Kepware KEPServerEXEPSS 0.2%CVE-2023-29444MEDIUMUncontrolled Search Path Element in PTC's Kepware KEPServerEXEPSS 0.2%