CVE-2020-27263 | ByteOS Network

Vulnerability Details :

CVE-2020-27263

Assigner-icscert

Assigner Org ID-7d14cffa-0d7d-4270-9dc0-52cabd5a23a6

Published At-13 Jan, 2021 | 23:30

Updated At-04 Aug, 2024 | 16:11

KEPServerEX: v6.0 to v6.9, ThingWorx Kepware Server: v6.8 and v6.9, ThingWorx Industrial Connectivity: All versions, OPC-Aggregator: All versions, Rockwell Automation KEPServer Enterprise, GE Digital Industrial Gateway Server: v7.68.804 and v7.66, Software Toolbox TOP Server: All 6.x versions, are vulnerable to a heap-based buffer overflow. Opening a specifically crafted OPC UA message could allow an attacker to crash the server and potentially leak data.

EPSS History

Score

Latest Score

-

N/A

Percentile

Latest Percentile

-

N/A

▼Common Vulnerabilities and Exposures (CVE)

Assigner:icscert

Assigner Org ID:7d14cffa-0d7d-4270-9dc0-52cabd5a23a6

Published At:13 Jan, 2021 | 23:30

Updated At:04 Aug, 2024 | 16:11

▼CVE Numbering Authority (CNA)

KEPServerEX: v6.0 to v6.9, ThingWorx Kepware Server: v6.8 and v6.9, ThingWorx Industrial Connectivity: All versions, OPC-Aggregator: All versions, Rockwell Automation KEPServer Enterprise, GE Digital Industrial Gateway Server: v7.68.804 and v7.66, Software Toolbox TOP Server: All 6.x versions, are vulnerable to a heap-based buffer overflow. Opening a specifically crafted OPC UA message could allow an attacker to crash the server and potentially leak data.

Affected Products

Vendor

Product

PTC Kepware KEPServerEX

Versions

Affected

v6.0 to v6.9

Vendor

Product

ThingWorx Kepware Server

Versions

Affected

v6.8 and v6.9

Vendor

Product

ThingWorx Industrial Connectivity

Versions

Affected

All versions

Vendor

Product

Versions

Affected

All versions

Vendor

Product

Rockwell Automation KEPServer Enterprise

Versions

Affected

All versions

Vendor

Product

GE Digital Industrial Gateway Server

Versions

Affected

v7.68.804
v7.66

Vendor

Product

Software Toolbox TOP Server

Versions

Affected

All 6.x versions

Problem Types

Type	CWE ID	Description
CWE	CWE-122	HEAP-BASED BUFFER OVERFLOW CWE-122

Type: CWE

CWE ID: CWE-122

Description: HEAP-BASED BUFFER OVERFLOW CWE-122

References

Hyperlink	Resource
https://us-cert.cisa.gov/ics/advisories/icsa-20-352-02	x_refsource_MISC

Hyperlink: https://us-cert.cisa.gov/ics/advisories/icsa-20-352-02

Resource:

x_refsource_MISC

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://us-cert.cisa.gov/ics/advisories/icsa-20-352-02	x_refsource_MISC x_transferred

Hyperlink: https://us-cert.cisa.gov/ics/advisories/icsa-20-352-02

Resource:

x_refsource_MISC

x_transferred

▼National Vulnerability Database (NVD)

Source:ics-cert@hq.dhs.gov

Published At:14 Jan, 2021 | 00:15

Updated At:21 Jan, 2021 | 16:10

KEPServerEX: v6.0 to v6.9, ThingWorx Kepware Server: v6.8 and v6.9, ThingWorx Industrial Connectivity: All versions, OPC-Aggregator: All versions, Rockwell Automation KEPServer Enterprise, GE Digital Industrial Gateway Server: v7.68.804 and v7.66, Software Toolbox TOP Server: All 6.x versions, are vulnerable to a heap-based buffer overflow. Opening a specifically crafted OPC UA message could allow an attacker to crash the server and potentially leak data.

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	9.1	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Primary	2.0	6.4	MEDIUM	AV:N/AC:L/Au:N/C:P/I:N/A:P

Type: Primary

Version: 3.1

Base score: 9.1

Base severity: CRITICAL

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Type: Primary

Version: 2.0

Base score: 6.4

Base severity: MEDIUM

Vector:

AV:N/AC:L/Au:N/C:P/I:N/A:P

CPE Matches

ge>>industrial_gateway_server>>7.66

cpe:2.3:a:ge:industrial_gateway_server:7.66:*:*:*:*:*:*:*

ge>>industrial_gateway_server>>7.68.804

cpe:2.3:a:ge:industrial_gateway_server:7.68.804:*:*:*:*:*:*:*

ptc>>kepware_kepserverex>>6.0

cpe:2.3:a:ptc:kepware_kepserverex:6.0:*:*:*:*:*:*:*

ptc>>kepware_kepserverex>>6.9

cpe:2.3:a:ptc:kepware_kepserverex:6.9:*:*:*:*:*:*:*

ptc>>opc-aggregator>>-

cpe:2.3:a:ptc:opc-aggregator:-:*:*:*:*:*:*:*

ptc>>thingworx_industrial_connectivity>>-

cpe:2.3:a:ptc:thingworx_industrial_connectivity:-:*:*:*:*:*:*:*

ptc>>thingworx_kepware_server>>6.8

cpe:2.3:a:ptc:thingworx_kepware_server:6.8:*:*:*:*:*:*:*

ptc>>thingworx_kepware_server>>6.9

cpe:2.3:a:ptc:thingworx_kepware_server:6.9:*:*:*:*:*:*:*

Rockwell Automation, Inc.

>>kepserver_enterprise>>6.6.504.0

cpe:2.3:a:rockwellautomation:kepserver_enterprise:6.6.504.0:*:*:*:*:*:*:*

Rockwell Automation, Inc.

>>kepserver_enterprise>>6.9.572.0

cpe:2.3:a:rockwellautomation:kepserver_enterprise:6.9.572.0:*:*:*:*:*:*:*

softwaretoolbox>>top_server>>Versions from 6.0(inclusive) to 6.9(inclusive)

cpe:2.3:a:softwaretoolbox:top_server:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-787	Primary	nvd@nist.gov
CWE-122	Secondary	ics-cert@hq.dhs.gov

CWE ID: CWE-787

Type: Primary

Source: nvd@nist.gov

CWE ID: CWE-122

Type: Secondary

Source: ics-cert@hq.dhs.gov

References

Hyperlink	Source	Resource
https://us-cert.cisa.gov/ics/advisories/icsa-20-352-02	ics-cert@hq.dhs.gov	Third Party Advisory US Government Resource

Hyperlink: https://us-cert.cisa.gov/ics/advisories/icsa-20-352-02

Source: ics-cert@hq.dhs.gov

Resource:

Third Party Advisory

US Government Resource