The affected products are vulnerable to an improper validation of...

9.8 CVSS

Vulnerability Description

The affected products are vulnerable to an improper validation of array index, which could allow an attacker to crash the server and remotely execute arbitrary code.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-0755

Check My Exposure

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

Chris Anastasio and Steven Seeley of Incite Team reported these vulnerabilities to CISA.

References

https://www.cisa.gov/uscert/ics/advisories/icsa-23-054-01

More from PTC

View All →

CVE-2024-6098

PTC Kepware ThingWorx Kepware Server Allocation of Resources Without Limits or Throttling

Medium 5.9

CVE-2024-6071

PTC Creo Elements/Direct License Server Missing Authorization

Critical 10

CVE-2024-3951

Cross-site Scripting in PTC Codebeamer

High 7.1

CVE-2023-5909

Improper Validation of Certificate with Host Mismatch in PTC KEPServerEx

High 7.5

CVE-2023-5908

Heap Based Buffer Overflow in PTC KEPServerEx

Critical 9.1

Affected Vendor

PTC

View all reports →

Affected Software

ThingWorx Edge C-SDK, .NET-SDK, ThingWorx Edge MicroServer (EMS), Kepware KEPServerEX, ThingWorx Kepware Server , ThingWorx Industrial Connectivity, ThingWorx Kepware Edge, KEPServer Enterprise , Digital Industrial Gateway Server

Vulnerable Versions:

0, All Versions