CVE-2023-0754: Integer Overflow

Q: What is CVE-2023-0754?

CVE-2023-0754 is a vulnerability that affects Ge Digital Industrial Gateway Server, Ptc Kepware Server, Ptc Kepware Serverex, Ptc Thingworx .net-sdk, Ptc Thingworx Edge C-sdk, Ptc Thingworx Edge Microserver, Ptc Thingworx Industrial Connectivity, Ptc Thingworx Kepware Edge, and Rockwellautomation Kepserver Enterprise products.

Q: How severe is CVE-2023-0754?

CVE-2023-0754 has a severity score of 9.8, which is considered critical.

Q: What is the vulnerability description of CVE-2023-0754?

CVE-2023-0754 is a vulnerability that allows an attacker to crash the server and remotely execute arbitrary code due to an integer overflow or wraparound.

Q: Which software products are affected by CVE-2023-0754?

CVE-2023-0754 affects Ge Digital Industrial Gateway Server, Ptc Kepware Server, Ptc Kepware Serverex, Ptc Thingworx .net-sdk, Ptc Thingworx Edge C-sdk, Ptc Thingworx Edge Microserver, Ptc Thingworx Industrial Connectivity, Ptc Thingworx Kepware Edge, and Rockwellautomation Kepserver Enterprise products.

Q: How can an attacker exploit CVE-2023-0754?

An attacker can exploit CVE-2023-0754 by taking advantage of the integer overflow or wraparound vulnerability to crash the server and execute arbitrary code remotely.

Published Feb 23, 2023

Updated

The affected products are vulnerable to an integer overflow or wraparound, which could allow an attacker to crash the server and remotely execute arbitrary code.

Affected Software

18 affected components

PTC ThingWorx Edge C-SDK: v2.2.12.1052 or lower

PTC .NET-SDK: v5.8.4.971 or lower

PTC ThingWorx Edge MicroServer (EMS): v5.4.10.0 or lower

PTC Kepware KEPServerEX: v6.12 or lower

PTC ThingWorx Kepware Server (formerly ThingWorx Industrial Connectivity): v6.12 or lower

PTC ThingWorx Industrial Connectivity

PTC ThingWorx Kepware Edge: v1.5 or lower

PTC Rockwell Automation KEPServer Enterprise: v6.12 or lower

PTC GE Digital Industrial Gateway Server: v7.612 or lower

GE Digital Industrial Gateway Server<=7.612

PTC Kepware Server<=6.12

PTC Kepware Serverex<=6.12

PTC Thingworx .net-sdk<=5.8.4.971

PTC Thingworx Edge C-sdk<=2.2.12.1052

PTC Thingworx Edge Microserver<=5.4.10.0

PTC ThingWorx Industrial Connectivity

PTC Thingworx Kepware Edge<=1.5

rockwellautomation Kepserver Enterprise<=6.12

Remediation

Information

PTC has released the following resolutions: Update the impacted product to the latest version: · ThingWorx Edge C-SDK: 3.0.0 or later. · ThingWorx Edge MicroServer (EMS): v5.4.11 or later. · .NET-SDK: v5.8.5 or later. For Kepware products, the vulnerability is mitigated if the ThingWorx Interface is not enabled. To use the ThingWorx Interface without the vulnerability, update to the latest version of the product: · Kepware KEPServerEX: v6.13 or later. · ThingWorx Kepware Server (formerly ThingWorx Industrial Connectivity): v6.13 or later. · ThingWorx Kepware Edge: v1.6 or later. The following products should be upgraded as indicated or in accordance with the applicable organization’s recommendations if the ThingWorx Interface is in use: · Rockwell Automation KEPServer Enterprise: v6.13 or later. · GE Digital Industrial Gateway Server: v7.613 or later. For more information see PTC’s Customer Support Article .

Event History

Feb 23, 2023

CVE Published

via MITRE·09:27 PM

Data Sourced

via MITRE·09:27 PM

RemedyDescriptionSeverityWeakness

Aug 2, 2024

Data Sourced

via ICS·05:27 AM

SeverityWeaknessAffected Software

Parent advisories

This vulnerability appears in the following advisories.

ICSA-23-054-01

Frequently Asked Questions

What is CVE-2023-0754?

CVE-2023-0754 is a vulnerability that affects Ge Digital Industrial Gateway Server, Ptc Kepware Server, Ptc Kepware Serverex, Ptc Thingworx .net-sdk, Ptc Thingworx Edge C-sdk, Ptc Thingworx Edge Microserver, Ptc Thingworx Industrial Connectivity, Ptc Thingworx Kepware Edge, and Rockwellautomation Kepserver Enterprise products.

How severe is CVE-2023-0754?

CVE-2023-0754 has a severity score of 9.8, which is considered critical.

What is the vulnerability description of CVE-2023-0754?