CVEvulnerability

CVE-2023-0755

9.8 CRITICAL Published 2023-02-23 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-02-23
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-129

Description

The affected products are vulnerable to an improper validation of array index, which could allow an attacker to crash the server and remotely execute arbitrary code.

Affected configurations

• ge digital industrial gateway server (<= 7.612) • ptc kepware server (<= 6.12) • ptc kepware serverex (<= 6.12) • ptc thingworx .net-sdk (<= 5.8.4.971) • ptc thingworx edge c-sdk (<= 2.2.12.1052) • ptc thingworx edge microserver (<= 5.4.10.0) • ptc thingworx industrial connectivity • ptc thingworx kepware edge (<= 1.5) • rockwellautomation kepserver enterprise (<= 6.12)

Related

Weakness · CWE (1)

  • CWE-129 Improper Validation of Array Index weakness

References