GCVE - cpe:2.3:a:ptc:thingworx_industrial_connectivity:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:ptc:thingworx_industrial_connectivity:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Ptc (`82b7fc5a-4572-5fe8-94f5-067fd527cbdb`)
Product	Thingworx Industrial Connectivity (`dd01de94-4c38-54b4-a318-41b12fcc8b4b`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-5909`	vulnerable	2026-06-03 14:53:49.900250	Improper Validation of Certificate with Host Mismatch in PTC KEPServerEx HIGH (7.5) KEPServerEX does not properly validate certificates from clients which may allow unauthenticated users to connect. Published: 2023-11-30T22:05:59.595Z Updated: 2026-02-25T17:20:07.195Z Open on db.gcve.eu Reference links https://www.cisa.gov/news-events/ics-advisories/icsa-23-334-03	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-5908`	vulnerable	2026-06-03 14:53:49.889816	Heap Based Buffer Overflow in PTC KEPServerEx CRITICAL (9.1) KEPServerEX is vulnerable to a buffer overflow which may allow an attacker to crash the product being accessed or leak information. Published: 2023-11-30T22:03:58.098Z Updated: 2024-08-02T08:14:24.586Z Open on db.gcve.eu Reference links https://www.cisa.gov/news-events/ics-advisories/icsa-23-334-03	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-29447`	vulnerable	2026-06-03 14:51:41.026330	Insufficiently Protected Credentials in PTC's Kepware KEPServerEX MEDIUM (5.7) An insufficiently protected credentials vulnerability in KEPServerEX could allow an adversary to capture user credentials as the web server uses basic authentication. Published: 2024-01-10T20:24:52.983Z Updated: 2025-06-17T20:59:11.540Z Open on db.gcve.eu Reference links https://www.cisa.gov/news-events/ics-advisories/icsa-23-243-03 https://www.ptc.com/en/support/article/cs399528 https://www.dragos.com/advisory/ptcs-kepserverex-vulnerabilities/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-29446`	vulnerable	2026-06-03 14:51:41.025823	Improper Input Validation in PTC's Kepware KEPServerEX MEDIUM (4.7) An improper input validation vulnerability has been discovered that could allow an adversary to inject a UNC path via a malicious project file. This allows an adversary to capture NLTMv2 hashes and potentially crack them offline. Published: 2024-01-10T20:21:51.434Z Updated: 2024-11-14T17:23:37.514Z Open on db.gcve.eu Reference links https://www.cisa.gov/news-events/ics-advisories/icsa-23-243-03 https://www.ptc.com/en/support/article/cs399528 https://www.dragos.com/advisory/ptcs-kepserverex-vulnerabilities/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-29445`	vulnerable	2026-06-03 14:51:41.025305	Uncontrolled Search Path Element in PTC's Kepware KEPServerEX HIGH (7.8) An uncontrolled search path element vulnerability (DLL hijacking) has been discovered that could allow a locally authenticated adversary to escalate privileges to SYSTEM. Published: 2024-01-10T20:17:12.837Z Updated: 2025-06-17T20:59:11.408Z Open on db.gcve.eu Reference links https://www.cisa.gov/news-events/ics-advisories/icsa-23-243-03 https://www.ptc.com/en/support/article/cs399528 https://www.dragos.com/advisory/ptcs-kepserverex-vulnerabilities/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-29444`	vulnerable	2026-06-03 14:51:41.024672	Uncontrolled Search Path Element in PTC's Kepware KEPServerEX MEDIUM (6.3) An uncontrolled search path element vulnerability (DLL hijacking) has been discovered that could allow a locally authenticated adversary to escalate privileges to SYSTEM. Alternatively, they could host a trojanized version of the software and trick victims into downloading and installing their malicious version to gain initial access and code execution. Published: 2024-01-10T17:06:35.965Z Updated: 2025-05-14T20:14:19.414Z Open on db.gcve.eu Reference links https://www.cisa.gov/news-events/ics-advisories/icsa-23-243-03 https://www.ptc.com/en/support/article/cs399528	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-0755`	vulnerable	2026-06-03 14:48:52.658436	Details available CRITICAL (9.8) The affected products are vulnerable to an improper validation of array index, which could allow an attacker to crash the server and remotely execute arbitrary code. Published: 2023-02-23T21:23:19.210Z Updated: 2025-01-16T21:55:52.537Z Open on db.gcve.eu Reference links https://www.cisa.gov/uscert/ics/advisories/icsa-23-054-01	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-0754`	vulnerable	2026-06-03 14:48:52.645263	Details available CRITICAL (9.8) The affected products are vulnerable to an integer overflow or wraparound, which could allow an attacker to crash the server and remotely execute arbitrary code. Published: 2023-02-23T21:27:09.964Z Updated: 2025-01-16T21:55:46.607Z Open on db.gcve.eu Reference links https://www.cisa.gov/uscert/ics/advisories/icsa-23-054-01	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Thingworx Industrial Connectivity

PURL mappings

Vulnerability references

Contribute