Softwaretoolbox

3 CVEs vendor

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-5909 Nov 30, 22:15 HIGH This Week

KEPServerEX does not properly validate certificates from clients which may allow unauthenticated users to connect. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Thingworx Kepware Server Thingworx Industrial Connectivity Top Server Industrial Gateway Server +8

NVD

CVSS 3.1

7.5

EPSS

0.4%

CVE-2023-5908 Nov 30, 22:15 CRITICAL Act Now

KEPServerEX is vulnerable to a buffer overflow which may allow an attacker to crash the product being accessed or leak information. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Heap Overflow Thingworx Kepware Server Thingworx Industrial Connectivity Top Server +9

NVD

CVSS 3.1

9.1

EPSS

1.0%

CVE-2013-2804 Aug 28, 13:09 HIGH This Week

The DNP Master Driver in Software Toolbox TOP Server before 5.12.140.0 allows remote attackers to cause a denial of service (master-station infinite loop) via crafted DNP3 packets to TCP port 20000. Rated high severity (CVSS 7.1), this vulnerability is remotely exploitable. No vendor patch available.

Denial Of Service Top Server Softwaretoolbox

NVD

CVSS 2.0

7.1

EPSS

0.5%

CVE-2023-5909

EPSS 0% CVSS 7.5

HIGH This Week

Information Disclosure Thingworx Kepware Server Thingworx Industrial Connectivity +10

NVD

CVE-2023-5908

EPSS 1% CVSS 9.1

CRITICAL Act Now

Buffer Overflow Heap Overflow Thingworx Kepware Server +11

NVD

CVE-2013-2804

EPSS 0% CVSS 7.1

HIGH This Week

Denial Of Service Top Server Softwaretoolbox

NVD