CVE-2023-0755 — PTC / ThingWorx Edge C-SDK

Description (CNA)

The affected products are vulnerable to an improper validation of array index, which could allow an attacker to crash the server and remotely execute arbitrary code.

Affected (CNA)

Vendor / product	Versions
PTC / ThingWorx Edge C-SDK	affected 0 through v2.2.12.1052
Microsoft / .NET-SDK	affected 0 through v5.8.4.971
PTC / ThingWorx Edge MicroServer (EMS)	affected 0 through v5.4.10.0
PTC / Kepware KEPServerEX	affected 0 through v6.12
PTC / ThingWorx Kepware Server	affected 0 through v6.12
PTC / ThingWorx Industrial Connectivity	affected All Versions
PTC / ThingWorx Kepware Edge	affected 0 through v1.5
Rockwell Automation / KEPServer Enterprise	affected 0 through v6.12
General Electric / Digital Industrial Gateway Server	affected 0 through v7.612

CWE

CWE-129

References

https://www.cisa.gov/uscert/ics/advisories/icsa-23-054-01

ADP enrichment

CVE

No English description supplied.

https://www.cisa.gov/uscert/ics/advisories/icsa-23-054-01

CISA-ADP

No English description supplied.

No references supplied.