Lucene search

[email protected]CVE-2023-0754

HistoryFeb 23, 2023 - 10:15 p.m.

CVE-2023-0754

2023-02-2322:15:11

CWE-190

[email protected]

web.nvd.nist.gov

vulnerability

affected products

integer overflow

server crash

remote code execution

cve-2023-0754

nvd

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.2%

JSON

The affected products are vulnerable to an integer
overflow or wraparound, which could allow an attacker to crash the server and remotely
execute arbitrary code.

Affected configurations

NVD

Node

gedigital_industrial_gateway_serverRange≤7.612

ptckepware_serverRange≤6.12

ptckepware_serverexRange≤6.12

ptcthingworx_.net-sdkRange≤5.8.4.971

ptcthingworx_edge_c-sdkRange≤2.2.12.1052

ptcthingworx_edge_microserverRange≤5.4.10.0

ptcthingworx_industrial_connectivity

ptcthingworx_kepware_edgeRange≤1.5

rockwellautomationkepserver_enterpriseRange≤6.12

CPENameOperatorVersion
ge:digital_industrial_gateway_serverge digital industrial gateway serverle7.612
ptc:kepware_serverptc kepware serverle6.12
ptc:kepware_serverexptc kepware serverexle6.12
ptc:thingworx_.net-sdkptc thingworx .net-sdkle5.8.4.971
ptc:thingworx_edge_c-sdkptc thingworx edge c-sdkle2.2.12.1052
ptc:thingworx_edge_microserverptc thingworx edge microserverle5.4.10.0
ptc:thingworx_industrial_connectivityptc thingworx industrial connectivityeq*
ptc:thingworx_kepware_edgeptc thingworx kepware edgele1.5
rockwellautomation:kepserver_enterpriserockwellautomation kepserver enterprisele6.12

CPE	Name	Operator	Version
ge:digital_industrial_gateway_server	ge digital industrial gateway server	le	7.612
ptc:kepware_server	ptc kepware server	le	6.12
ptc:kepware_serverex	ptc kepware serverex	le	6.12
ptc:thingworx_.net-sdk	ptc thingworx .net-sdk	le	5.8.4.971
ptc:thingworx_edge_c-sdk	ptc thingworx edge c-sdk	le	2.2.12.1052
ptc:thingworx_edge_microserver	ptc thingworx edge microserver	le	5.4.10.0
ptc:thingworx_industrial_connectivity	ptc thingworx industrial connectivity	eq	*
ptc:thingworx_kepware_edge	ptc thingworx kepware edge	le	1.5
rockwellautomation:kepserver_enterprise	rockwellautomation kepserver enterprise	le	6.12

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "ThingWorx Edge C-SDK",
    "vendor": "PTC",
    "versions": [
      {
        "lessThanOrEqual": "v2.2.12.1052 ",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": ".NET-SDK",
    "vendor": "Microsoft",
    "versions": [
      {
        "lessThanOrEqual": "v5.8.4.971 ",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "ThingWorx Edge MicroServer (EMS)",
    "vendor": "PTC",
    "versions": [
      {
        "lessThanOrEqual": "v5.4.10.0 ",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Kepware KEPServerEX",
    "vendor": "PTC",
    "versions": [
      {
        "lessThanOrEqual": "v6.12 ",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "ThingWorx Kepware Server ",
    "vendor": "PTC",
    "versions": [
      {
        "lessThanOrEqual": "v6.12 ",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "ThingWorx Industrial Connectivity",
    "vendor": "PTC",
    "versions": [
      {
        "status": "affected",
        "version": "All Versions "
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "ThingWorx Kepware Edge",
    "vendor": "PTC",
    "versions": [
      {
        "lessThanOrEqual": "v1.5",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "KEPServer Enterprise ",
    "vendor": "Rockwell Automation ",
    "versions": [
      {
        "lessThanOrEqual": "v6.12",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Digital Industrial Gateway Server ",
    "vendor": "General Electric ",
    "versions": [
      {
        "lessThanOrEqual": "v7.612",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]