CVE-2022-2825

Published: Mar 29, 2023Modified: Jun 17, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kepware KEPServerEX 6.11.718.0. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of text encoding conversions. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-18411.

Affected (8)

Products: Ge: Industrial Gateway Server · Ptc: Kepware Kepserverex, Opc Aggregator, Thingworx Industrial Connectivity, Thingworx Kepware Edge, Thingworx Kepware Server · Rockwellautomation: Kepserver Enterprise · +1 more

Show all products

Ge: Industrial Gateway Server · Ptc: Kepware Kepserverex, Opc Aggregator, Thingworx Industrial Connectivity, Thingworx Kepware Edge, Thingworx Kepware Server · Rockwellautomation: Kepserver Enterprise · Softwaretoolbox: Top Server

1 product

Industrial Gateway Server

Ptc

5 products

Kepware Kepserverex

Opc Aggregator

Thingworx Industrial Connectivity

Thingworx Kepware Edge

Thingworx Kepware Server

1 product

1 product

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Ge Industrial Gateway Server	Before 7.612
Ptc Kepware Kepserverex	Before 6.12
Ptc Opc Aggregator	Before 6.12
Ptc Thingworx Industrial Connectivity	All versions
Ptc Thingworx Kepware Edge	Before 1.4
Ptc Thingworx Kepware Server	Before 6.12
Rockwellautomation Kepserver Enterprise	Before 6.12
Softwaretoolbox Top Server	Before 6.12