Approved changes feed: RSS · Atom

cpe:2.3:a:ptc:kepware_kepserverex:6.0:*:*:*:*:*:*:*

part: a version: 6.0 update: *

VendorPtc (82b7fc5a-4572-5fe8-94f5-067fd527cbdb)
ProductKepware Kepserverex (dc44ba2c-707e-574d-ac42-8653411755f2)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-27267 vulnerable 2026-06-03 14:42:17.954224 Details available
KEPServerEX v6.0 to v6.9, ThingWorx Kepware Server v6.8 and v6.9, ThingWorx Industrial Connectivity (all versions), OPC-Aggregator (all versions), Rockwell Automation KEPServer Enterprise, GE Digital Industrial Gateway Server v7.68.804 and v7.66, and Software Toolbox TOP Server all 6.x versions, are vulnerable to a heap-based buffer overflow. Opening a specifically crafted OPC UA message could allow an attacker to crash the server and potentially leak data.
Published: 2021-01-13T23:25:07.000Z
Updated: 2024-08-04T16:11:36.412Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-27265 vulnerable 2026-06-03 14:42:17.952973 Details available
KEPServerEX: v6.0 to v6.9, ThingWorx Kepware Server: v6.8 and v6.9, ThingWorx Industrial Connectivity: All versions, OPC-Aggregator: All versions, Rockwell Automation KEPServer Enterprise, GE Digital Industrial Gateway Server: v7.68.804 and v7.66, Software Toolbox TOP Server: All 6.x versions are vulnerable to a stack-based buffer overflow. Opening a specifically crafted OPC UA message could allow an attacker to crash the server and remotely execute code.
Published: 2021-01-13T23:33:45.000Z
Updated: 2024-08-04T16:11:36.330Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-27263 vulnerable 2026-06-03 14:42:17.945629 Details available
KEPServerEX: v6.0 to v6.9, ThingWorx Kepware Server: v6.8 and v6.9, ThingWorx Industrial Connectivity: All versions, OPC-Aggregator: All versions, Rockwell Automation KEPServer Enterprise, GE Digital Industrial Gateway Server: v7.68.804 and v7.66, Software Toolbox TOP Server: All 6.x versions, are vulnerable to a heap-based buffer overflow. Opening a specifically crafted OPC UA message could allow an attacker to crash the server and potentially leak data.
Published: 2021-01-13T23:30:08.000Z
Updated: 2024-08-04T16:11:36.407Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.