CVE-2023-29446 json
Improper Input Validation in PTC's Kepware KEPServerEX
published 2024-01-10 2 y ago modified 2026-06-17 4 mo ago also EUVD-2023-33015
- cvss
- 4.7
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.2%
- EPSS 0.2% chance of exploitation in 30 days, percentile 15%
- public exploits
- 0
- none known
Summary
An improper input validation vulnerability has been discovered that could allow an adversary to inject a UNC path via a malicious project file. This allows an adversary to capture NLTMv2 hashes and potentially crack them offline.
Vendor advisories
What the vendors themselves say about their products: affected, fixed or not affected, and what to do.
cisa ICSA-23-243-03 updated cvss 4.7
PTC Kepware KepServerEX (Update A)
-
PTC Kepware KepServerEX <=6.14.263.0 PTC ThingWorx Industrial Connectivity >=8.0, =<8.5 PTC ThingWorx Kepware Server <=6.14.263.0affected: mitigation “PTC is aware of these vulnerabilities and is developing patches to address them. PTC expects these issues to be addressed by November 2023. This advisory will be updated when these patches are ready.” ptc.com
From CISA ICS and IT advisories (CSAF, https://github.com/cisagov/CSAF), a U.S. Government work; changed: reduced to products, statuses and remediations. CISA notification · csaf
CISA SSVC
- Exploitation
- none
- Automatable
- no
- Technical impact
- partial
- Assessed
- 23 mo ago
Exploit prediction
0.24% chance of exploitation in the next 30 days, higher than 15% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 3.1 | 4.7 | CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N |
| NVD | 3.1 | 4.7 | CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N |
Affected products
- PTC Kepware KEPServerEX
- PTC ThingWorx Kepware Server
- PTC ThingWorx Industrial Connectivity
Classification
References
-
ptc.com
/en/support/article/cs399528
vendor-advisory
-
cisa.gov
/news-events/ics-advisories/icsa-23-243-03
government-resource, third-party-advisory, us-government-resource
-
dragos.com
/advisory/ptcs-kepserverex-vulnerabilities/
third-party-advisory
Sources
- CVE List CVE-2023-29446
- NVD CVE-2023-29446
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.