PT-2023-5233 · Kepware+1 · Kepware Kepserverex+1

Sam Hanson · Published 2023-08-31 · Updated 2024-10-08 · CVE-2023-29446

Positive Technologies (AI Summary)

CVSS v3.1

4.7

Medium

Base vector

AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Kepware KEPServerEX versions (affected versions not specified) ThingWorx Kepware Server versions (affected versions not specified)

Description The issue is related to insufficient input validation, which can be exploited by an adversary to gain access to confidential information. This can be achieved by uploading a malicious project file, allowing the adversary to inject a UNC path and capture NLTMv2 hashes, potentially cracking them offline.

Recommendations For Kepware KEPServerEX, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For ThingWorx Kepware Server, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-20

CWE-40

Related Identifiers

BDU:2023-05845

CVE-2023-29446

Affected Products

Kepware Kepserverex

Thingworx Kepware Server

References · 12

• https://nvd.nist.gov/vuln/detail/CVE-2023-29446 · Security Note
• https://ptc.com/en/support/article/cs399528 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-29446 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-05845 · Security Note
• https://cybersecurity-help.cz/vdb/SB2023090139 · Note
• https://vuldb.com/ru/?id.238499 · Note
• https://dragos.com/advisory/ptcs-kepserverex-vulnerabilities · Note
• https://t.me/cvenotify/67045 · Telegram Post
• https://t.me/cvenotify/66968 · Telegram Post
• https://cisa.gov/news-events/ics-advisories/icsa-23-243-03 · Note
• https://t.me/cvenotify/68077 · Telegram Post
• https://t.me/cvenotify/97467 · Telegram Post