CVE-2023-0755
Published Feb 23, 2023
Last updated a year ago
Overview
- Description
- The affected products are vulnerable to an improper validation of array index, which could allow an attacker to crash the server and remotely execute arbitrary code.
- Source
- ics-cert@hq.dhs.gov
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 3.1
- Type
- Primary
- Base score
- 9.8
- Impact score
- 5.9
- Exploitability score
- 3.9
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Severity
- CRITICAL
Weaknesses
- ics-cert@hq.dhs.gov
- CWE-129
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:ge:digital_industrial_gateway_server:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B4D9E061-4E5C-4390-916D-8AABE3523E16",
"versionEndIncluding": "7.612"
},
{
"criteria": "cpe:2.3:a:ptc:kepware_server:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A50F0395-983A-4261-9FE3-40762E5EC02F",
"versionEndIncluding": "6.12"
},
{
"criteria": "cpe:2.3:a:ptc:kepware_serverex:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F7C3EDBB-FEB2-4BE7-A379-AF07F1BCD46D",
"versionEndIncluding": "6.12"
},
{
"criteria": "cpe:2.3:a:ptc:thingworx_.net-sdk:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "63EBD473-C1FD-4B90-BEB9-38488F6EC8A5",
"versionEndIncluding": "5.8.4.971"
},
{
"criteria": "cpe:2.3:a:ptc:thingworx_edge_c-sdk:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7D82325D-070B-462B-B92F-34CC047D3340",
"versionEndIncluding": "2.2.12.1052"
},
{
"criteria": "cpe:2.3:a:ptc:thingworx_edge_microserver:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E860B82D-355A-4AB3-AA93-6B1D15A1B2D7",
"versionEndIncluding": "5.4.10.0"
},
{
"criteria": "cpe:2.3:a:ptc:thingworx_industrial_connectivity:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D01A814D-8F2B-4B88-A66B-F2A2C293A6AB"
},
{
"criteria": "cpe:2.3:a:ptc:thingworx_kepware_edge:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C16730F8-C263-478B-B286-9831FFF5A409",
"versionEndIncluding": "1.5"
},
{
"criteria": "cpe:2.3:a:rockwellautomation:kepserver_enterprise:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E5A51513-026A-43DA-9CB6-D5B68819CA47",
"versionEndIncluding": "6.12"
}
],
"operator": "OR"
}
]
}
]