Medium severity4.7NVD Advisory· Published Jan 10, 2024· Updated Jun 17, 2026
CVE-2023-29446
CVE-2023-29446
Description
An improper input validation vulnerability has been discovered that could allow an adversary to inject a UNC path via a malicious project file. This allows an adversary to capture NLTMv2 hashes and potentially crack them offline.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
70+ 1 more
- (no CPE)range: 0
- cpe:2.3:a:ptc:kepware_kepserverex:*:*:*:*:*:*:*:*range: >=6.0.2107.0,<=6.14.263.0
0+ 1 more
- (no CPE)range: 0
- cpe:2.3:a:ptc:thingworx_kepware_server:*:*:*:*:*:*:*:*range: >=6.8,<=6.14.263.0
8.0+ 1 more
- (no CPE)range: 8.0
- cpe:2.3:a:ptc:thingworx_industrial_connectivity:*:*:*:*:*:*:*:*range: >=8.0,<=8.5
Patches
Vulnerability mechanics
References
3- www.cisa.gov/news-events/ics-advisories/icsa-23-243-03nvdThird Party AdvisoryUS Government Resource
- www.dragos.com/advisory/ptcs-kepserverex-vulnerabilities/nvdThird Party Advisory
- www.ptc.com/en/support/article/cs399528nvdVendor Advisory
News mentions
0No linked articles in our index yet.