medium5.7
CVE-2023-29447
An insufficiently protected credentials vulnerability in KEPServerEX could allow an adversary to capture user credentials as the web server uses basic authenti…
Impact
An insufficiently protected credentials vulnerability in KEPServerEX could allow an adversary to capture user credentials as the web server uses basic authentication.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ptc | Kepware Kepserverex | from 6.0.2107.0 through 6.14.263.0 |
| Ptc | Thingworx Kepware Server | from 6.8 through 6.14.263.0 |
| Ptc | Thingworx Industrial Connectivity | from 8.0 through 8.5 |
Weakness classification
References
- NVD record
- CVE.org record
- https://www.cisa.gov/news-events/ics-advisories/icsa-23-243-03
- https://www.dragos.com/advisory/ptcs-kepserverex-vulnerabilities/
- https://www.ptc.com/en/support/article/cs399528
- https://www.cisa.gov/news-events/ics-advisories/icsa-23-243-03
- https://www.dragos.com/advisory/ptcs-kepserverex-vulnerabilities/
- https://www.ptc.com/en/support/article/cs399528