CVE-2023-5909: Improper Validation of Certificate with Host Mismatch in PTC KEPServerEx

Published Nov 30, 2023
·
Updated

KEPServerEX does not properly validate certificates from clients which may allow unauthenticated users to connect.

Affected Software

8 affected components
GE Industrial Gateway Server<=7.614
PTC Keepserverex<=6.14.263.0
PTC OPC-Aggregator<=6.14
PTC ThingWorx Industrial Connectivity
PTC Thingworx Kepware Edge<=1.7
PTC ThingWorx Kepware Server<=6.14.263.0
rockwellautomation Kepserver Enterprise<=6.14.263.0
Softwaretoolbox Top Server<=6.14.263.0

Remediation

Information

PTC has released and recommends users to update to the following versions: * KEPServerEX should upgrade to v6.15 or later * ThingWorx Kepware Server should upgrade to v6.15 or later * ThingWorx Industrial Connectivity should upgrade to ThingWorx Kepware Server v6.15 or later * OPC-Aggregator should upgrade to v6.15 or later * ThingWorx Kepware Edge: Upgrade to v1.8 or later Refer to secure configuration guide here https://www.ptc.com/en/support/refdoc/ThingWorx_Kepware_Server/6.15/ThingWorx%20Kepware%20Server%20Secure%20Deployment%20Guide If additional questions remain, please contact PTC Technical Support https://support.ptc.com/apps/case_logger_viewer/cs/auth/ssl/log For more information, see PTC's advisory https://www.ptc.com/en/support/article/CS405439 .

Event History

Nov 30, 2023
CVE Published
10:05 PM
Data Sourced
10:05 PM
RemedyDescriptionSeverityWeakness
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is CVE-2023-5909?

CVE-2023-5909 is a vulnerability in PTC KEPServerEx that allows unauthenticated users to connect due to improper validation of certificates.

2

What is the severity of CVE-2023-5909?

CVE-2023-5909 has a severity rating of 7.5 (high).

3

Which software is affected by CVE-2023-5909?

CVE-2023-5909 affects GE Industrial Gateway Server, PTC KEPServerEx, PTC OPC-Aggregator, PTC ThingWorx Industrial Connectivity, PTC ThingWorx Kepware Edge, PTC ThingWorx Kepware Server, RockwellAutomation KepServer Enterprise, and Softwaretoolbox Top Server.

4

How can unauthenticated users connect due to CVE-2023-5909?

Unauthenticated users can connect due to CVE-2023-5909 because KEPServerEx does not properly validate certificates from clients.

5

Is there a reference for CVE-2023-5909?

Yes, you can find more information about CVE-2023-5909 at this link: https://www.cisa.gov/news-events/ics-advisories/icsa-23-334-03

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203