Free and open · new CVEs checked every 20 minutesStatusRSSOpen dataContact

CVE-2023-5908: KEPServerEX is vulnerable to a buffer overflow which may allow an attacker to crash the product being acc

52
This month
CRITICAL 9.1REMOTEUPGRADEUPGRADEUPGRADE

CVE-2023-5908 is a critical-severity flaw (CVSS 9.1) affecting industrial gateway server, keepserverex, opc-aggregator. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

KEPServerEX is vulnerable to a buffer overflow which may allow an attacker to crash the product being accessed or leak information.

Why this priority

  • Critical severity
  • Remotely exploitable, no login, no user action

A fixed release or distro patch exists.

Risk facts

CVSS score9.1 (Critical)
Attack vectorNetwork (remote)
Attack complexityLow
Privileges neededNone
User interactionNone
EPSS exploit chance1.0% (top 38%)
CISA exploited listNo
WeaknessCWE-122, CWE-120
Published2023-11-30
Last modified2026-06-17
Publisher (CNA): ICS-CERT · Vendor: ge · ptc

Share: LinkedIn · X · Reddit

Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

ge industrial gateway server UPGRADE
Affected: <= 7.614
Fixed in: newer than 7.614
Safe to downgrade to: no unaffected older release
1. Check installed version
apt-cache policy industrial-gateway-server || rpm -q industrial-gateway-server || industrial-gateway-server --version
2. UPGRADE to newer than 7.614 (Debian / Ubuntu)
sudo apt update && sudo apt install --only-upgrade industrial-gateway-server
2. UPGRADE (RHEL / Amazon Linux / Fedora)
sudo dnf upgrade industrial-gateway-server
Note
Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.
ptc keepserverex UPGRADE
Affected: <= 6.14.263.0
Fixed in: newer than 6.14.263.0
Safe to downgrade to: no unaffected older release
1. Check installed version
apt-cache policy keepserverex || rpm -q keepserverex || keepserverex --version
2. UPGRADE to newer than 6.14.263.0 (Debian / Ubuntu)
sudo apt update && sudo apt install --only-upgrade keepserverex
2. UPGRADE (RHEL / Amazon Linux / Fedora)
sudo dnf upgrade keepserverex
Note
Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.
ptc opc-aggregator UPGRADE
Affected: <= 6.14
Fixed in: newer than 6.14
Safe to downgrade to: no unaffected older release
1. Check installed version
apt-cache policy opc-aggregator || rpm -q opc-aggregator || opc-aggregator --version
2. UPGRADE to newer than 6.14 (Debian / Ubuntu)
sudo apt update && sudo apt install --only-upgrade opc-aggregator
2. UPGRADE (RHEL / Amazon Linux / Fedora)
sudo dnf upgrade opc-aggregator
Note
Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.
ptc thingworx industrial connectivity MITIGATE
Affected: all versions
Fixed in: no fixed release known
Safe to downgrade to: no unaffected older release
1. Check installed version
apt-cache policy thingworx-industrial-connectivity || rpm -q thingworx-industrial-connectivity || thingworx-industrial-connectivity --version
No fixed or unaffected release known
Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access.
ptc thingworx kepware edge UPGRADE
Affected: <= 1.7
Fixed in: newer than 1.7
Safe to downgrade to: no unaffected older release
1. Check installed version
apt-cache policy thingworx-kepware-edge || rpm -q thingworx-kepware-edge || thingworx-kepware-edge --version
2. UPGRADE to newer than 1.7 (Debian / Ubuntu)
sudo apt update && sudo apt install --only-upgrade thingworx-kepware-edge
2. UPGRADE (RHEL / Amazon Linux / Fedora)
sudo dnf upgrade thingworx-kepware-edge
Note
Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.
ptc thingworx kepware server UPGRADE
Affected: <= 6.14.263.0
Fixed in: newer than 6.14.263.0
Safe to downgrade to: no unaffected older release
1. Check installed version
apt-cache policy thingworx-kepware-server || rpm -q thingworx-kepware-server || thingworx-kepware-server --version
2. UPGRADE to newer than 6.14.263.0 (Debian / Ubuntu)
sudo apt update && sudo apt install --only-upgrade thingworx-kepware-server
2. UPGRADE (RHEL / Amazon Linux / Fedora)
sudo dnf upgrade thingworx-kepware-server
Note
Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.
Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2023-5908?

industrial gateway server: upgrade to newer than 7.614; keepserverex: upgrade to newer than 6.14.263.0; opc-aggregator: upgrade to newer than 6.14. Exact commands for each OS are on this page.

Is CVE-2023-5908 being exploited?

CVE-2023-5908 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2023-5908 affect?

CVE-2023-5908 affects industrial gateway server, keepserverex, opc-aggregator. Severity is critical (CVSS 9.1). KEPServerEX is vulnerable to a buffer overflow which may allow an attacker to crash the product being accessed or leak information.

How urgent is CVE-2023-5908?

Priority 52/100. Critical severity; Remotely exploitable, no login, no user action

Related CVEs

References

← Back to latest CVEs

Get the weekly exploited-CVE digest by emailThe CVEs being attacked this week and how to fix them. No spam, unsubscribe any time.