PTC Kepware KepServerEX (Update A)

Risk Summary

Successful exploitation of these vulnerabilities could allow an attacker to gain elevated privileges, execute arbitrary code, and obtain server hashes and credentials.

CVEs (4)

Remediations

• PTC is aware of these vulnerabilities and is developing patches to address them. PTC expects these issues to be addressed by November 2023. This advisory will be updated when these patches are ready.
• PTC recommends users follow the directions in the secure configuration documentation.
• Users are encouraged to refer to PTC's security advisory on these vulnerabilities for more information.

Affected Vendors

Affected Products (3)

Affected Sectors

Critical Manufacturing