Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2023-29446

16
FAUCET Score

CVE-2023-29446 is an improper input validation vulnerability affecting PTC Kepware KEPServerEX, ThingWorx Industrial Connectivity, and ThingWorx Kepware Server. An attacker can inject a UNC path into a malicious project file, leading to the capture of NTLMv2 hashes. This vulnerability has a CVSS score of 4.7 (Medium) due to its local attack vector, high attack complexity, and potential for high confidentiality impact through offline hash cracking. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.

Impacted Technologies

VendorProductVersion(s)CPE
>= 6.0.2107.0, <= 6.14.263.0CPE matchmatch criteria
cpe:2.3:a:ptc:kepware_kepserverex:*:*:*:*:*:*:*:*
>= 6.8, <= 6.14.263.0CPE matchmatch criteria
cpe:2.3:a:ptc:thingworx_kepware_server:*:*:*:*:*:*:*:*
>= 8.0, <= 8.5CPE matchmatch criteria
cpe:2.3:a:ptc:thingworx_industrial_connectivity:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

4.7MEDIUM

CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N

Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
Exploitability Score
1.0
Impact Score
3.6
CvssVersion
3.1

Exploit Intelligence

EPSS Score
0.21%
Probability of exploitation in next 30 days
EPSS Percentile
11.9%
Percentile rank of EPSS score among Peer Group
As of 2026-07-26
Model: v2026.06.15
This CVE's current EPSS score of 0.0021 is in the 25th percentile among its peer group of 166 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.0 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Vendor Patches (6)

adguardvendor investigatingvia llm_extracted
dahuavendor investigatingvia llm_extracted
elementvendor investigatingvia llm_extracted
nutanixvendor investigatingvia llm_extracted
postgresqlvendor investigatingvia llm_extracted
posthogvendor investigatingvia llm_extracted

Vendor Advisories (6)

adguardllm-adguard-040bb47f4080d2a0MEDIUM

Security vulnerabilities identified in PTC Kepware Products

Dec 20, 2024
dahuallm-dahua-6e4bf0da180ee33bMEDIUM

UNC path injection in PTC Kepware KEPServerEX

Dec 20, 2024
postgresqlllm-postgresql-1920861da995b740MEDIUM

Security vulnerabilities identified in PTC Kepware Products

Dec 20, 2024
nutanixllm-nutanix-02e2440caff3c87fMEDIUM

Security vulnerabilities identified in PTC Kepware Products: KEPServerEX is vulnerable to UNC path injection via a malicious project file.

Dec 20, 2024
posthogllm-posthog-dfe9077665817216MEDIUM

KEPServerEX vulnerable to UNC path injection via malicious project file

Dec 20, 2024
elementllm-element-9dfc0b87abc5f265MEDIUM

Vulnerability in KEPServerEX due to UNC path injection

Dec 20, 2024

References

cisa.gov / news-events/ics-advisories/icsa-23-243-03
Third Party AdvisoryUS Government Resource
dragos.com / advisory/ptcs-kepserverex-vulnerabilities
Third Party Advisory
ptc.com / en/support/article/cs399528
Vendor Advisory