Kepware Technologies Improper Input Validation Vulnerability

CVEs (1)

Remediations

• Kepware Technologies has produced a new version of the software, V5.12.140.0, which resolves the vulnerability. Information about the new version is available at the Kepware support site (login required): (https://my.kepware.com/mykepware/Login.aspx)
• The researchers suggest the following mitigations: Block DNP3 traffic from traversing onto business or corporate networks through the use of an IPS or firewall with DPN3-specific rule sets.

Affected Vendors

Affected Products (1)