high7.5
CVE-2023-5909
KEPServerEX does not properly validate certificates from clients which may allow unauthenticated users to connect.
Impact
KEPServerEX does not properly validate certificates from clients which may allow unauthenticated users to connect.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ge | Industrial Gateway Server | through 7.614 |
| Ptc | Keepserverex | through 6.14.263.0 |
| Ptc | Opc-Aggregator | through 6.14 |
| Ptc | Thingworx Industrial Connectivity | All versions |
| Ptc | Thingworx Kepware Edge | through 1.7 |
| Ptc | Thingworx Kepware Server | through 6.14.263.0 |
| Rockwellautomation | Kepserver Enterprise | through 6.14.263.0 |
| Softwaretoolbox | Top Server | through 6.14.263.0 |