Input validation

2023-02-2322:15:00

PRIOn knowledge base

www.prio-n.com

array index validation

vulnerability

server crash

remote code execution

nvd

9.7 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.5%

JSON

The affected products are vulnerable to an improper validation of array index, which could allow an attacker to crash the server and remotely execute arbitrary code.

CPENameOperatorVersion
digital_industrial_gateway_serverle7.612
kepware_serverle6.12
kepware_serverexle6.12
thingworx_.net-sdkle5.8.4.971
thingworx_edge_c-sdkle2.2.12.1052
thingworx_edge_microserverle5.4.10.0
thingworx_kepware_edgele1.5
kepserver_enterprisele6.12

Name	Operator	Version
digital_industrial_gateway_server	le	7.612
kepware_server	le	6.12
kepware_serverex	le	6.12
thingworx_.net-sdk	le	5.8.4.971
thingworx_edge_c-sdk	le	2.2.12.1052
thingworx_edge_microserver	le	5.4.10.0
thingworx_kepware_edge	le	1.5
kepserver_enterprise	le	6.12

References

www.cisa.gov/uscert/ics/advisories/icsa-23-054-01