PatchTheCVEindustrial gateway server vulnerabilities and fixes
Recent CVEs affecting industrial gateway server, with upgrade or downgrade steps. 7 tracked.
Also searched as: industrialgatewayserver.
industrial gateway server has 7 tracked vulnerabilities, 6 critical. A fixed release or vendor patch exists for 4. Most recent: 2023-11-30. Highest priority: CVE-2020-27265 (score 63/100).
- CVE-2023-5909 HIGH 7.5 UPGRADE UPGRADE KEPServerEX does not properly validate certificates from clients which may allow unauthenticated user
- CVE-2023-5908 CRITICAL 9.1 UPGRADE UPGRADE KEPServerEX is vulnerable to a buffer overflow which may allow an attacker to crash the product being acc
- CVE-2022-2848 CRITICAL 9.1 UPGRADE UPGRADE This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kepware KEPS
- CVE-2022-2825 CRITICAL 9.8 UPGRADE UPGRADE This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kepware KEPS
- CVE-2020-27267 CRITICAL 9.1 DOWNGRADE DOWNGRADE KEPServerEX v6.0 to v6.9, ThingWorx Kepware Server v6.8 and v6.9, ThingWorx Industrial Connectivity (all versi
- CVE-2020-27265 CRITICAL 9.8 DOWNGRADE DOWNGRADE KEPServerEX: v6.0 to v6.9, ThingWorx Kepware Server: v6.8 and v6.9, ThingWorx Industrial Connectivity: All ver
- CVE-2020-27263 CRITICAL 9.1 DOWNGRADE DOWNGRADE KEPServerEX: v6.0 to v6.9, ThingWorx Kepware Server: v6.8 and v6.9, ThingWorx Industrial Connectivity: All ver
FAQ
How do I fix industrial gateway server vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is industrial gateway server being exploited right now?
None of the tracked industrial gateway server CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which industrial gateway server CVE should I patch first?
CVE-2020-27265 currently ranks highest (63/100): KEPServerEX: v6.0 to v6.9, ThingWorx Kepware Server: v6.8 and v6.9, ThingWorx Industrial Connectivity: All ver.
RSS feed for industrial gateway server · ← Back to latest CVEs