High

DATE	CVE	VULNERABILITY TITLE	RISK
2023-11-30	CVE-2023-5909	Improper Certificate Validation vulnerability in multiple products KEPServerEX does not properly validate certificates from clients which may allow unauthenticated users to connect. network low complexity ptc softwaretoolbox ge rockwellautomation CWE-295	7.5
2021-01-14	CVE-2020-27265	Out-of-bounds Write vulnerability in multiple products KEPServerEX: v6.0 to v6.9, ThingWorx Kepware Server: v6.8 and v6.9, ThingWorx Industrial Connectivity: All versions, OPC-Aggregator: All versions, Rockwell Automation KEPServer Enterprise, GE Digital Industrial Gateway Server: v7.68.804 and v7.66, Software Toolbox TOP Server: All 6.x versions are vulnerable to a stack-based buffer overflow. network low complexity ge ptc rockwellautomation softwaretoolbox CWE-787	7.5