Cyber Resilience

CVE-2022-2825

Critical

Published: 29 March 2023

Published
29 March 2023
Modified
18 February 2025
KEV Added
—
Patch
—
CVSS Score v3.1 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score 0.0128 80.0th percentile
Risk Priority 20 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2022-2825 is a critical-severity Stack-based Buffer Overflow (CWE-121) vulnerability in Ge Industrial Gateway Server. Its CVSS base score is 9.8 (Critical).

Operationally, ranked in the top 20.0% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability details

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kepware KEPServerEX 6.11.718.0. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of text encoding conversions. The issue results from the…

more

lack of proper validation of the length of user-supplied data prior to copying it to a stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-18411.

CWE(s)
CWE-121

Related Threats

No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.

Affected Assets

ge
industrial gateway server
≤ 7.612
ptc
kepware kepserverex
≤ 6.12
ptc
opc-aggregator
≤ 6.12
ptc
thingworx industrial connectivity
all versions
ptc
thingworx kepware edge
≤ 1.4
ptc
thingworx kepware server
≤ 6.12
rockwellautomation
kepserver enterprise
≤ 6.12
softwaretoolbox
top server
≤ 6.12

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References