PTC Keepserverex vulnerabilities

2 CVEs affecting PTC Keepserverex, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-5909, published 2023-11-30.

More from PTC.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2023-5908, published 2023-11-30. Critical severity, CVSS 9.1. EPSS: 1% chance of exploitation in the next 30 days. KEPServerEX is vulnerable to a buffer overflow which may allow an attacker to crash the product being accessed or leak information.
• CVE-2023-5909, published 2023-11-30. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. KEPServerEX does not properly validate certificates from clients which may allow unauthenticated users to connect.