Medium severity5.7NVD Advisory· Published Jan 10, 2024· Updated Jun 17, 2026
CVE-2023-29447
CVE-2023-29447
Description
An insufficiently protected credentials vulnerability in KEPServerEX could allow an adversary to capture user credentials as the web server uses basic authentication.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
8cpe:2.3:a:ptc:kepware_kepserverex:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:ptc:kepware_kepserverex:*:*:*:*:*:*:*:*range: >=6.0.2107.0,<=6.14.263.0
- (no CPE)range: 0
cpe:2.3:a:ptc:thingworx_kepware_server:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:ptc:thingworx_kepware_server:*:*:*:*:*:*:*:*range: >=6.8,<=6.14.263.0
- (no CPE)range: 0
cpe:2.3:a:ptc:thingworx_industrial_connectivity:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:ptc:thingworx_industrial_connectivity:*:*:*:*:*:*:*:*range: >=8.0,<=8.5
- (no CPE)range: 8.0
Patches
Vulnerability mechanics
References
3- www.cisa.gov/news-events/ics-advisories/icsa-23-243-03nvdThird Party AdvisoryUS Government Resource
- www.dragos.com/advisory/ptcs-kepserverex-vulnerabilities/nvdThird Party Advisory
- www.ptc.com/en/support/article/cs399528nvdVendor Advisory
News mentions
0No linked articles in our index yet.