PTC kepware server vulnerabilities

Latest PTC kepware server CVEs

Newest publication first

1. CVE-2023-0754 The affected products are vulnerable to an integer overflow or wraparound, which could allow an attacker to crash the server and remotely execute arbitrary code.

   Published 2023-02-23

   Critical·CVSS 9.8 EPSS 2.9%

   The affected products are vulnerable to an integer overflow or wraparound, which could allow an attacker to crash the server and remotely execute arbitrary code.

2. CVE-2023-0755 The affected products are vulnerable to an improper validation of array index, which could allow an attacker to crash the server and remotely execute arbitrary code.

   Published 2023-02-23

   Critical·CVSS 9.8 EPSS 11.8%

   The affected products are vulnerable to an improper validation of array index, which could allow an attacker to crash the server and remotely execute arbitrary code.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.