← CVE Intelligence

CVE-2023-5909

Improper Validation of Certificate with Host Mismatch in PTC KEPServerEx PUBLISHED

Description (CNA)

KEPServerEX does not properly validate certificates from clients which may allow unauthenticated users to connect.

Affected (CNA)

Vendor / productVersions
PTC / KEPServerEXaffected 0 through 6.14.263.0
PTC / ThingWorx Kepware Serveraffected 0 through 6.14.263.0
PTC / ThingWorx Industrial Connectivityaffected All versions
PTC / OPC-Aggregatoraffected 0 through 6.14
PTC / ThingWorx Kepware Edgeaffected 0 through 1.7
Rockwell Automation / KEPServer Enterpriseaffected 0 through 6.14.263.0
GE Gigital / Industrial Gateway Serveraffected 0 through 7.614
Software Toolbox / TOP Serveraffected 0 through 6.14.263.0

CWE

CWE-297

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.