Software Toolbox vulnerabilities
3 vulnerabilities
Known vulnerabilities in Software Toolbox products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 1 product.
Products
1- TOP Server3 vulnerabilities
CVE-2024-6098geigs+3
EPSS score0.40%
When performing an online tag generation to devices which communicate
using the ControlLogix protocol, a machine-in-the-middle, or a device
that is not configured correctly, could deliver a response leading to
unrestricted or unregulated resource allocation. This could cause a
denial-of-service condition and crash the Kepware application. By
default, these functions are turned off, yet they remain accessible for
users who recognize and require their advantages.CVE-2023-5908ge gigitalindustrial gateway server+11EPSS score0.96%
KEPServerEX is vulnerable to a buffer overflow which may allow an attacker to crash the product being accessed or leak information.CVE-2023-5909ge gigitalindustrial gateway server+11EPSS score0.44%
KEPServerEX does not properly validate certificates from clients which may allow unauthenticated users to connect.