CVE-2020-27263

CVE-2020-27263

Vendor N/A

Product PTC Kepware KEPServerEX

Weakness CWE-122

Published January 13, 2021

Last update August 4, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

KEPServerEX: v6.0 to v6.9, ThingWorx Kepware Server: v6.8 and v6.9, ThingWorx Industrial Connectivity: All versions, OPC-Aggregator: All versions, Rockwell Automation KEPServer Enterprise, GE Digital Industrial Gateway Server: v7.68.804 and v7.66, Software Toolbox TOP Server: All 6.x versions, are vulnerable to a heap-based buffer overflow. Opening a specifically crafted OPC UA message could allow an attacker to crash the server and potentially leak data.

Key dates

02Disclosure timeline

January 13, 2021 CVE published

August 4, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2020-27263 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/122.html

Related vulnerabilities

Identifiers

CVE CVE-2020-27263

CWE CWE-122

Affected versions

Vendor N/A

Product PTC Kepware KEPServerEX

Affected v6.0 to v6.9

Vendor N/A

Product ThingWorx Kepware Server

Affected v6.8 and v6.9

Vendor N/A

Product ThingWorx Industrial Connectivity

Affected All versions

Vendor N/A

Product OPC-Aggregator

Affected All versions

Vendor N/A

Product Rockwell Automation KEPServer Enterprise

Affected All versions

Vendor N/A

Product GE Digital Industrial Gateway Server

Affected v7.68.804

Vendor N/A

Product GE Digital Industrial Gateway Server

Affected v7.66

Vendor N/A

Product Software Toolbox TOP Server

Affected All 6.x versions

01Description

02Disclosure timeline

03References

04Related CVE