Skip to content
Ptc Thingworx vulnerabilities
-
ptc thingworx
An Insecure Direct Object Reference (IDOR) in PTC ThingWorx v9.5.0 allows attackers to view...
CVE-2024-40395
6.5 Medium
-
ptc kepware thingworx kepware server, ge igs, ptc kepware kepserverex +1 more +3 more
PTC Kepware ThingWorx Kepware Server Allocation of Resources Without Limits or Throttling
CVE-2024-6098
5.9 Medium
-
ptc kepware kepserverex, thingworx industrial connectivity, thingworx kepware server +2 more
Insufficiently Protected Credentials in PTC's Kepware KEPServerEX
CVE-2023-29447
5.7 Medium
-
ptc kepware kepserverex, thingworx industrial connectivity, thingworx kepware server +2 more
Improper Input Validation in PTC's Kepware KEPServerEX
CVE-2023-29446
4.7 Medium
-
ptc kepware kepserverex, thingworx industrial connectivity, thingworx kepware server +2 more
Uncontrolled Search Path Element in PTC's Kepware KEPServerEX
CVE-2023-29445
7.8 High
-
ptc kepware kepserverex, thingworx industrial connectivity, thingworx kepware server +2 more
Uncontrolled Search Path Element in PTC's Kepware KEPServerEX
CVE-2023-29444
6.3 Medium
-
kepware kepserverex, ge industrial gateway server, ptc keepserverex +6 more +8 more
Improper Validation of Certificate with Host Mismatch in PTC KEPServerEx
CVE-2023-5909
7.5 High
-
kepware kepserverex, ge industrial gateway server, ptc keepserverex +6 more +8 more
Heap Based Buffer Overflow in PTC KEPServerEx
CVE-2023-5908
9.1 Critical
-
kepware kepserverex, ptc kepware kepserverex, ge industrial gateway server +6 more +8 more
This vulnerability allows remote attackers to execute arbitrary code on affected installations of...
CVE-2022-2848
9.1 Critical
-
kepware kepserverex, ptc kepware kepserverex, ge industrial gateway server +6 more +8 more
This vulnerability allows remote attackers to execute arbitrary code on affected installations of...
CVE-2022-2825
9.8 Critical
-
ge digital industrial gateway server, microsoft .net-sdk, ptc kepware kepserverex +10 more +12 more
The affected products are vulnerable to an integer overflow or wraparound, which could allow an...
CVE-2023-0754
9.8 Critical
-
ge digital industrial gateway server, microsoft .net-sdk, ptc kepware kepserverex +10 more +12 more
The affected products are vulnerable to an improper validation of array index, which could allow...
CVE-2023-0755
EPSS 11.8%
9.8 Critical
-
ge industrial gateway server, ptc opc-aggregator, thingworx industrial connectivity +4 more +6 more
KEPServerEX: v6.0 to v6.9, ThingWorx Kepware Server: v6.8 and v6.9, ThingWorx Industrial...
CVE-2020-27265
EPSS 12.5%
9.8 Critical
-
ge industrial gateway server, ptc ge digital industrial gateway server, opc-aggregator +6 more +8 more
KEPServerEX: v6.0 to v6.9, ThingWorx Kepware Server: v6.8 and v6.9, ThingWorx Industrial...
CVE-2020-27263
9.1 Critical
-
ge industrial gateway server, ptc ge digital industrial gateway server, opc-aggregator +6 more +8 more
KEPServerEX v6.0 to v6.9, ThingWorx Kepware Server v6.8 and v6.9, ThingWorx Industrial...
CVE-2020-27267
9.1 Critical
-
ptc thingworx platform
PTC ThingWorx Platform through 8.3.0 is vulnerable to a directory traversal attack on ZIP files...
CVE-2018-20092
7.5 High
-
ptc thingworx platform
An issue was discovered in PTC ThingWorx Platform 6.5 through 8.2. There is reflected XSS in the...
CVE-2018-17218
5.4 Medium
-
ptc thingworx platform
An issue was discovered in PTC ThingWorx Platform 6.5 through 8.2. There is a hardcoded...
CVE-2018-17217
7.5 High
-
ptc thingworx platform
An issue was discovered in PTC ThingWorx Platform 6.5 through 8.2. There is password hash...
CVE-2018-17216
6.5 Medium