GCVE - cpe:2.3:a:ptc:kepware_kepserverex:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:ptc:kepware_kepserverex:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Ptc (`82b7fc5a-4572-5fe8-94f5-067fd527cbdb`)
Product	Kepware Kepserverex (`dc44ba2c-707e-574d-ac42-8653411755f2`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-6098`	vulnerable	2026-06-08 06:58:17.768191	PTC Kepware ThingWorx Kepware Server Allocation of Resources Without Limits or Throttling MEDIUM (5.3) When performing an online tag generation to devices which communicate using the ControlLogix protocol, a machine-in-the-middle, or a device that is not configured correctly, could deliver a response leading to unrestricted or unregulated resource allocation. This could cause a denial-of-service condition and crash the Kepware application. By default, these functions are turned off, yet they remain accessible for users who recognize and require their advantages. Published: 2024-08-16T14:57:51.023Z Updated: 2024-08-19T17:32:48.721Z Open on db.gcve.eu Reference links https://www.cisa.gov/news-events/ics-advisories/icsa-24-228-11 https://www.ptc.com/en/support/article/CS423892	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-29447`	vulnerable	2026-06-08 06:02:40.248349	Insufficiently Protected Credentials in PTC's Kepware KEPServerEX MEDIUM (5.7) An insufficiently protected credentials vulnerability in KEPServerEX could allow an adversary to capture user credentials as the web server uses basic authentication. Published: 2024-01-10T20:24:52.983Z Updated: 2025-06-17T20:59:11.540Z Open on db.gcve.eu Reference links https://www.cisa.gov/news-events/ics-advisories/icsa-23-243-03 https://www.ptc.com/en/support/article/cs399528 https://www.dragos.com/advisory/ptcs-kepserverex-vulnerabilities/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-29446`	vulnerable	2026-06-08 06:02:40.247611	Improper Input Validation in PTC's Kepware KEPServerEX MEDIUM (4.7) An improper input validation vulnerability has been discovered that could allow an adversary to inject a UNC path via a malicious project file. This allows an adversary to capture NLTMv2 hashes and potentially crack them offline. Published: 2024-01-10T20:21:51.434Z Updated: 2024-11-14T17:23:37.514Z Open on db.gcve.eu Reference links https://www.cisa.gov/news-events/ics-advisories/icsa-23-243-03 https://www.ptc.com/en/support/article/cs399528 https://www.dragos.com/advisory/ptcs-kepserverex-vulnerabilities/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-29445`	vulnerable	2026-06-08 06:02:40.246700	Uncontrolled Search Path Element in PTC's Kepware KEPServerEX HIGH (7.8) An uncontrolled search path element vulnerability (DLL hijacking) has been discovered that could allow a locally authenticated adversary to escalate privileges to SYSTEM. Published: 2024-01-10T20:17:12.837Z Updated: 2025-06-17T20:59:11.408Z Open on db.gcve.eu Reference links https://www.cisa.gov/news-events/ics-advisories/icsa-23-243-03 https://www.ptc.com/en/support/article/cs399528 https://www.dragos.com/advisory/ptcs-kepserverex-vulnerabilities/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-29444`	vulnerable	2026-06-08 06:02:40.244057	Uncontrolled Search Path Element in PTC's Kepware KEPServerEX MEDIUM (6.3) An uncontrolled search path element vulnerability (DLL hijacking) has been discovered that could allow a locally authenticated adversary to escalate privileges to SYSTEM. Alternatively, they could host a trojanized version of the software and trick victims into downloading and installing their malicious version to gain initial access and code execution. Published: 2024-01-10T17:06:35.965Z Updated: 2025-05-14T20:14:19.414Z Open on db.gcve.eu Reference links https://www.cisa.gov/news-events/ics-advisories/icsa-23-243-03 https://www.ptc.com/en/support/article/cs399528	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-0755`	vulnerable	2026-06-08 05:52:32.545539	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-0754`	vulnerable	2026-06-08 05:52:32.534825	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-2848`	vulnerable	2026-06-08 05:43:36.610139	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-2825`	vulnerable	2026-06-08 05:43:36.562371	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.