CVE-2023-0755: Out-of-bounds Read

Q: What is CVE-2023-0755?

CVE-2023-0755 is a vulnerability that affects Ge Digital Industrial Gateway Server, Ptc Kepware Server, Ptc Kepware Serverex, Ptc Thingworx .net-sdk, Ptc Thingworx Edge C-sdk, Ptc Thingworx Edge Microserver, Ptc Thingworx Industrial Connectivity, Ptc Thingworx Kepware Edge, and Rockwellautomation Kepserver Enterprise. It allows an attacker to crash the server and remotely execute arbitrary code.

Q: How severe is CVE-2023-0755?

CVE-2023-0755 has a severity rating of 9.8 (critical).

Q: How can an attacker exploit CVE-2023-0755?

An attacker can exploit CVE-2023-0755 by sending specially crafted input to trigger an improper validation of array index, causing the server to crash and potentially execute arbitrary code.

Q: What is the affected version of Ge Digital Industrial Gateway Server in CVE-2023-0755?

The affected version of Ge Digital Industrial Gateway Server in CVE-2023-0755 is up to and including version 7.612.

Q: How can I mitigate the vulnerability in CVE-2023-0755?

To mitigate the vulnerability in CVE-2023-0755, it is recommended to apply the necessary security patches or updates provided by the vendor and follow their recommended mitigation steps.

Published Feb 23, 2023

Updated

The affected products are vulnerable to an improper validation of array index, which could allow an attacker to crash the server and remotely execute arbitrary code.

Affected Software

18 affected components

PTC ThingWorx Edge C-SDK: v2.2.12.1052 or lower

PTC .NET-SDK: v5.8.4.971 or lower

PTC ThingWorx Edge MicroServer (EMS): v5.4.10.0 or lower

PTC Kepware KEPServerEX: v6.12 or lower

PTC ThingWorx Kepware Server (formerly ThingWorx Industrial Connectivity): v6.12 or lower

PTC ThingWorx Industrial Connectivity

PTC ThingWorx Kepware Edge: v1.5 or lower

PTC Rockwell Automation KEPServer Enterprise: v6.12 or lower

PTC GE Digital Industrial Gateway Server: v7.612 or lower

GE Digital Industrial Gateway Server<=7.612

PTC Kepware Server<=6.12

PTC Kepware Serverex<=6.12

PTC Thingworx .net-sdk<=5.8.4.971

PTC Thingworx Edge C-sdk<=2.2.12.1052

PTC Thingworx Edge Microserver<=5.4.10.0

PTC ThingWorx Industrial Connectivity

PTC Thingworx Kepware Edge<=1.5

rockwellautomation Kepserver Enterprise<=6.12

Remediation

Information

PTC has released the following resolutions: Update the impacted product to the latest version: · ThingWorx Edge C-SDK: 3.0.0 or later. · ThingWorx Edge MicroServer (EMS): v5.4.11 or later. · .NET-SDK: v5.8.5 or later. For Kepware products, the vulnerability is mitigated if the ThingWorx Interface is not enabled. To use the ThingWorx Interface without the vulnerability, update to the latest version of the product: · Kepware KEPServerEX: v6.13 or later. · ThingWorx Kepware Server (formerly ThingWorx Industrial Connectivity): v6.13 or later. · ThingWorx Kepware Edge: v1.6 or later. The following products should be upgraded as indicated or in accordance with the applicable organization’s recommendations if the ThingWorx Interface is in use: · Rockwell Automation KEPServer Enterprise: v6.13 or later. · GE Digital Industrial Gateway Server: v7.613 or later. For more information see PTC’s Customer Support Article .

Event History

Feb 23, 2023

CVE Published

via MITRE·09:23 PM

Data Sourced

via MITRE·09:23 PM

RemedyDescriptionSeverityWeakness

Aug 2, 2024

Data Sourced

via ICS·05:27 AM

SeverityWeaknessAffected Software

Parent advisories

This vulnerability appears in the following advisories.

ICSA-23-054-01

Frequently Asked Questions

What is CVE-2023-0755?

CVE-2023-0755 is a vulnerability that affects Ge Digital Industrial Gateway Server, Ptc Kepware Server, Ptc Kepware Serverex, Ptc Thingworx .net-sdk, Ptc Thingworx Edge C-sdk, Ptc Thingworx Edge Microserver, Ptc Thingworx Industrial Connectivity, Ptc Thingworx Kepware Edge, and Rockwellautomation Kepserver Enterprise. It allows an attacker to crash the server and remotely execute arbitrary code.

How severe is CVE-2023-0755?

CVE-2023-0755 has a severity rating of 9.8 (critical).

How can an attacker exploit CVE-2023-0755?