CVE-2024-6098: falha de média gravidade em PTC Kepware ThingWorx Kepware Server
PTC Kepware ThingWorx Kepware Server Allocation of Resources Without Limits or Throttling
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.9epss 0.4%
When performing an online tag generation to devices which communicate
using the ControlLogix protocol, a machine-in-the-middle, or a device
that is not configured correctly, could deliver a response leading to
unrestricted or unregulated resource allocation. This could cause a
denial-of-service condition and crash the Kepware application. By
default, these functions are turned off, yet they remain accessible for
users who recognize and require their advantages.
CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Produtos afetados
GE · IGSPTC · Kepware KEPServerEXPTC · Kepware ThingWorx Kepware ServerSoftware Toolbox · TOP ServerCVEs relacionadas — PTC Kepware ThingWorx Kepware Server
No mesmo produto, das mais perigosas para as menos.
CVE-2023-0755CRITICALCVE-2023-0755EPSS 11.8%CVE-2023-0754CRITICALCVE-2023-0754EPSS 2.9%CVE-2023-29447MEDIUMInsufficiently Protected Credentials in PTC's Kepware KEPServerEXEPSS 0.4%CVE-2023-29446MEDIUMImproper Input Validation in PTC's Kepware KEPServerEXEPSS 0.2%CVE-2023-29445HIGHUncontrolled Search Path Element in PTC's Kepware KEPServerEXEPSS 0.2%CVE-2023-29444MEDIUMUncontrolled Search Path Element in PTC's Kepware KEPServerEXEPSS 0.2%