PTC Alert
2353Warning Date
Severity Level
Warning Number
Target Sector
11 September, 2022
● High
2022-5216
All
PTC has released security updates to address multiple vulnerabilities in the following products:
- Kepware KEPServerEX:
- Versions prior to 6.12
- ThingWorkx Kepware Server:
- Versions prior to 6.12
- ThingWorkx Industrial Connectivity:
- All versions
- OPC-Aggregator:
- Versions prior to 6.12
- ThingWorkx Kepware Edge:
- Versions 1.4 and prior
- Rockwell Automation KEPServer Enterprise:
- Versions prior to v6.12
- GE Digital Industrial Gateway Server:
- Versions prior to v7.612
- Software Toolbox TOP Server:
- Versions prior to v6.12
- Versions prior to v6.12
Attacker could exploit these vulnerabilities by doing the following:
- Execute arbitrary code remotely
- Buffer Overflow
The PTC team encourages users to review the security advisory and apply the necessary updates: