CVE-2023-29447: falha de média gravidade em PTC Kepware KEPServerEX
Insufficiently Protected Credentials in PTC's Kepware KEPServerEX
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.7epss 0.4%
An insufficiently protected credentials vulnerability in KEPServerEX could allow an adversary to capture user credentials as the web server uses basic authentication.
CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Produtos afetados
PTC · Kepware KEPServerEXPTC · ThingWorx Industrial ConnectivityPTC · ThingWorx Kepware ServerCVEs relacionadas — PTC Kepware KEPServerEX
No mesmo produto, das mais perigosas para as menos.
CVE-2023-0755CRITICALCVE-2023-0755EPSS 11.8%CVE-2023-0754CRITICALCVE-2023-0754EPSS 2.9%CVE-2023-5908CRITICALHeap Based Buffer Overflow in PTC KEPServerExEPSS 1.0%CVE-2023-5909HIGHImproper Validation of Certificate with Host Mismatch in PTC KEPServerExEPSS 0.4%CVE-2024-6098MEDIUMPTC Kepware ThingWorx Kepware Server Allocation of Resources Without Limits or ThrottlingEPSS 0.4%CVE-2023-29446MEDIUMImproper Input Validation in PTC's Kepware KEPServerEXEPSS 0.2%