PTC Inc.

PTC develops a focused but strategically important portfolio of industrial IoT and connectivity platforms, including ThingWorx, Kepware, and Axeda product lines, that enable real-time data exchange and device management across manufacturing and enterprise environments. Vulnerabilities affecting the vendor skew strongly toward critical-severity outcomes, reflecting the memory-safety and access-control demands of industrial middleware and device-agent software that often runs with elevated privileges in operational technology networks. The recurring exposure centers on products such as ThingWorx Industrial Connectivity, Kepware Server, and Axeda Agent and recurs through weakness classes including heap-based buffer overflows, path-traversal flaws, memory-boundary violations, and missing authentication on critical functions—patterns consistent with native code processing of untrusted network input in industrial protocols. Defenders tracking PTC deployments should prioritize severity assessments and treat industrial connectivity products as high-risk given their operational-technology integration and the criticality of the flaws observed. Current exploitation activity and severity counts are shown alongside this summary.