softwaretoolbox records

8 published records for vendor softwaretoolbox.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 2
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

8 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
42Plan	CVE-2020-27265No exploit	KEPServerEX: v6.0 to v6.9, ThingWorx Kepware Server: v6.8 and v6.9, ThingWorx Industrial Connectivity: All versions, OPC-Aggregator: All verge · industrial gateway server · CWE-121 Pre-auth Memory safety	Critical9.8	—	10.1%	Jan 13, 2021
40Plan	CVE-2022-2825No exploit	This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kepware KEPServerEX 6.11.718.0.ge · industrial gateway server · CWE-121 pre-auth RCE Memory safety	Critical9.8	—	3.4%	Mar 29, 2023
37Monitor	CVE-2020-27263No exploit	KEPServerEX: v6.0 to v6.9, ThingWorx Kepware Server: v6.8 and v6.9, ThingWorx Industrial Connectivity: All versions, OPC-Aggregator: All verge · industrial gateway server · CWE-122 Pre-auth Memory safety	Critical9.1	—	4.9%	Jan 13, 2021
37Monitor	CVE-2020-27267No exploit	KEPServerEX v6.0 to v6.9, ThingWorx Kepware Server v6.8 and v6.9, ThingWorx Industrial Connectivity (all versions), OPC-Aggregator (all versge · industrial gateway server · CWE-416 Pre-auth Memory safety	Critical9.1	—	4.9%	Jan 13, 2021
37Monitor	CVE-2022-2848No exploit	This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kepware KEPServerEX 6.11.718.0.ge · industrial gateway server · CWE-122 pre-auth RCE Memory safety	Critical9.1	—	3.4%	Mar 29, 2023
36Monitor	CVE-2023-5908No exploit	Heap Based Buffer Overflow in PTC KEPServerExge · industrial gateway server · CWE-122 Pre-auth Memory safety	Critical9.1	—	1.0%	Nov 30, 2023
30Monitor	CVE-2023-5909No exploit	Improper Validation of Certificate with Host Mismatch in PTC KEPServerExge · industrial gateway server · CWE-297 Pre-auth Weak crypto	High7.5	—	0.4%	Nov 30, 2023
28Monitor	CVE-2013-2804No exploit	The DNP Master Driver in Software Toolbox TOP Server before 5.12.140.0 allows remote attackers to cause a denial of service (master-station softwaretoolbox · top server · CWE-20 Pre-auth Denial of service	High7.1	—	1.3%	Aug 28, 2013

CVE-2020-27265
42Plan
KEPServerEX: v6.0 to v6.9, ThingWorx Kepware Server: v6.8 and v6.9, ThingWorx Industrial Connectivity: All versions, OPC-Aggregator: All ver
CriticalCVSS 9.8No exploitEPSS 10%
- Pre-auth
- Memory safety
ge · industrial gateway serverJan 13, 2021
CVE-2022-2825
40Plan
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kepware KEPServerEX 6.11.718.0.
CriticalCVSS 9.8No exploitEPSS 3%
- pre-auth RCE
- Memory safety
ge · industrial gateway serverMar 29, 2023
CVE-2020-27263
37Monitor
KEPServerEX: v6.0 to v6.9, ThingWorx Kepware Server: v6.8 and v6.9, ThingWorx Industrial Connectivity: All versions, OPC-Aggregator: All ver
CriticalCVSS 9.1No exploitEPSS 5%
- Pre-auth
- Memory safety
ge · industrial gateway serverJan 13, 2021
CVE-2020-27267
37Monitor
KEPServerEX v6.0 to v6.9, ThingWorx Kepware Server v6.8 and v6.9, ThingWorx Industrial Connectivity (all versions), OPC-Aggregator (all vers
CriticalCVSS 9.1No exploitEPSS 5%
- Pre-auth
- Memory safety
ge · industrial gateway serverJan 13, 2021
CVE-2022-2848
37Monitor
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kepware KEPServerEX 6.11.718.0.
CriticalCVSS 9.1No exploitEPSS 3%
- pre-auth RCE
- Memory safety
ge · industrial gateway serverMar 29, 2023
CVE-2023-5908
36Monitor
Heap Based Buffer Overflow in PTC KEPServerEx
CriticalCVSS 9.1No exploitEPSS 1%
- Pre-auth
- Memory safety
ge · industrial gateway serverNov 30, 2023
CVE-2023-5909
30Monitor
Improper Validation of Certificate with Host Mismatch in PTC KEPServerEx
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Weak crypto
ge · industrial gateway serverNov 30, 2023
CVE-2013-2804
28Monitor
The DNP Master Driver in Software Toolbox TOP Server before 5.12.140.0 allows remote attackers to cause a denial of service (master-station
HighCVSS 7.1No exploitEPSS 1%
- Pre-auth
- Denial of service
softwaretoolbox · top serverAug 28, 2013