IP-DB.com
Türkçe English Deutsch Español
Giriş API Anahtarı Al
9.8Kritik

CVE-2023-0754

PTC ThingWorx Edge C-SDK; Microsoft .NET-SDK; PTC ThingWorx Edge MicroServer (EMS); PTC Kepware KEPServerEX Yayım: (3 yıl önce)

Açıklama

The affected products are vulnerable to an integer overflow or wraparound, which could  allow an attacker to crash the server and remotely execute arbitrary code.

Zayıflık türü (CWE): CWE-190

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

ÜreticiÜrünSürümler
General Electric Digital Industrial Gateway Server ≤ v7.612
Microsoft .NET-SDK ≤ v5.8.4.971
PTC Kepware KEPServerEX ≤ v6.12
PTC ThingWorx Edge C-SDK ≤ v2.2.12.1052
PTC ThingWorx Edge MicroServer (EMS) ≤ v5.4.10.0
PTC ThingWorx Industrial Connectivity All Versions
PTC ThingWorx Kepware Edge ≤ v1.5
PTC ThingWorx Kepware Server ≤ v6.12
Rockwell Automation KEPServer Enterprise ≤ v6.12

Kaynaklar ve yamalar

Aynı üründe son açıklar — .NET

5.3Orta
CVE-2026-120796

.NET Denial of Service Vulnerability

Microsoft .NET 11.0 installed on Linux; Microsoft .NET 11.0 installed on Mac OS; Microsoft .NET 11.0 installed on Windows; Microsoft System.Text.Json

Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.

7.5Yüksek
CVE-2026-118749

ASP.NET Core Denial of Service Vulnerability

Microsoft .NET 11.0 installed on Linux; Microsoft .NET 11.0 installed on Mac OS; Microsoft .NET 11.0 installed on Windows; Microsoft Microsoft Visual Studio 2026 version 18.12

Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to deny service over a network.

7.5Yüksek
CVE-2026-118748

ASP.NET Core Denial of Service Vulnerability

Microsoft .NET 11.0 installed on Linux; Microsoft .NET 11.0 installed on Mac OS; Microsoft .NET 11.0 installed on Windows; Microsoft Microsoft Visual Studio 2026 version 18.12

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.

8.8Yüksek
CVE-2026-118745

Visual Studio Remote Code Execution Vulnerability

Microsoft .NET 10.0 installed on Windows; Microsoft .NET 11.0 installed on Windows; Microsoft .NET 8.0 installed on Windows; Microsoft .NET 9.0 installed on Windows

Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.

8.8Yüksek
CVE-2026-114159

Visual Studio Remote Code Execution Vulnerability

Microsoft .NET 10.0 installed on Windows; Microsoft .NET 11.0 installed on Windows; Microsoft .NET 8.0 installed on Windows; Microsoft .NET 9.0 installed on Windows

Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.