critical9.8
CVE-2023-0755
The affected products are vulnerable to an improper validation of array index, which could allow an attacker to crash the server and remotely execute arbitrary…
Impact
The affected products are vulnerable to an improper validation of array index, which could allow an attacker to crash the server and remotely execute arbitrary code.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ge | Digital Industrial Gateway Server | through 7.612 |
| Ptc | Kepware Server | through 6.12 |
| Ptc | Kepware Serverex | through 6.12 |
| Ptc | Thingworx .Net-Sdk | through 5.8.4.971 |
| Ptc | Thingworx Edge C-Sdk | through 2.2.12.1052 |
| Ptc | Thingworx Edge Microserver | through 5.4.10.0 |
| Ptc | Thingworx Industrial Connectivity | All versions |
| Ptc | Thingworx Kepware Edge | through 1.5 |
| Rockwellautomation | Kepserver Enterprise | through 6.12 |