[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fn2AcYdx9j4qvtwu_bt5h8sH_orLavfXwd_vz6rhnbFU":3,"g5a-risk:CVE-2023-29447":147},{"success":4,"data":5,"meta":144},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":41,"epssPercentile":30,"epssTimeSeries":42,"severity":43,"affectedProducts":44,"affectedProductsCount":56,"references":57,"referencesCount":79,"weaknesses":80,"weaknessesCount":89,"isActivelyExploited":90,"cisaInfo":30,"otxData":30,"relatedBlogPosts":91,"seoMetadata":92,"configurations":117,"relatedVendorCves":142,"notableEvents":143},"CVE-2023-29447","What is CVE-2023-29447?","An insufficiently protected credentials vulnerability in KEPServerEX could allow an adversary to capture user credentials as the web server uses basic authentication.","An insufficiently protected credentials vulnerability in KEPServerEX could allow an adversary to capture user credentials as the web server uses basic authen...","2024-01-10T21:15:08.79","2026-06-17T05:50:04.67",5.3,"CVSS:3.1\u002FAV:A\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":38,"CVSSMetricV2":39,"CVSSMetricV40":40},[16,33],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":31,"ImpactScore":32},"ot-cert@dragos.com","Secondary",{"Version":20,"VectorString":21,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":25,"Scope":26,"ConfidentialityImpact":27,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":28,"BaseSeverity":29,"ExploitCodeMaturity":30,"RemediationLevel":30,"ReportConfidence":30,"TemporalScore":30,"TemporalSeverity":30,"ConfidentialityRequirement":30,"IntegrityRequirement":30,"AvailabilityRequirement":30,"ModifiedAttackVector":30,"ModifiedAttackComplexity":30,"ModifiedPrivilegesRequired":30,"ModifiedUserInteraction":30,"ModifiedScope":30,"ModifiedConfidentialityImpact":30,"ModifiedIntegrityImpact":30,"ModifiedAvailabilityImpact":30,"EnvironmentalScore":30,"EnvironmentalSeverity":30},"3.1","CVSS:3.1\u002FAV:A\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:N","ADJACENT_NETWORK","LOW","NONE","REQUIRED","UNCHANGED","HIGH",5.7,"MEDIUM",null,2.1,3.6,{"Source":34,"Type":35,"CVSSData":36,"ExploitabilityScore":37,"ImpactScore":32},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":22,"AttackComplexity":27,"PrivilegesRequired":24,"UserInteraction":24,"Scope":26,"ConfidentialityImpact":27,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":12,"BaseSeverity":29,"ExploitCodeMaturity":30,"RemediationLevel":30,"ReportConfidence":30,"TemporalScore":30,"TemporalSeverity":30,"ConfidentialityRequirement":30,"IntegrityRequirement":30,"AvailabilityRequirement":30,"ModifiedAttackVector":30,"ModifiedAttackComplexity":30,"ModifiedPrivilegesRequired":30,"ModifiedUserInteraction":30,"ModifiedScope":30,"ModifiedConfidentialityImpact":30,"ModifiedIntegrityImpact":30,"ModifiedAvailabilityImpact":30,"EnvironmentalScore":30,"EnvironmentalSeverity":30},1.6,[],[],[],0.00363,[41,41,41,41,41,41,41],"Medium",[45,50,53],{"vendor":46,"product":47,"version":48,"criteria":49,"vulnerable":4},"ptc","kepware_kepserverex","*","cpe:2.3:a:ptc:kepware_kepserverex:*:*:*:*:*:*:*:*",{"vendor":46,"product":51,"version":48,"criteria":52,"vulnerable":4},"thingworx_kepware_server","cpe:2.3:a:ptc:thingworx_kepware_server:*:*:*:*:*:*:*:*",{"vendor":46,"product":54,"version":48,"criteria":55,"vulnerable":4},"thingworx_industrial_connectivity","cpe:2.3:a:ptc:thingworx_industrial_connectivity:*:*:*:*:*:*:*:*",3,[58,64,68,73,75,77],{"url":59,"source":60,"tags":61},"https:\u002F\u002Fwww.cisa.gov\u002Fnews-events\u002Fics-advisories\u002Ficsa-23-243-03","CISA",[62,63],"Third Party Advisory","US Government Resource",{"url":65,"source":66,"tags":67},"https:\u002F\u002Fwww.dragos.com\u002Fadvisory\u002Fptcs-kepserverex-vulnerabilities\u002F","Dragos",[62],{"url":69,"source":70,"tags":71},"https:\u002F\u002Fwww.ptc.com\u002Fen\u002Fsupport\u002Farticle\u002Fcs399528","Ptc",[72],"Vendor Advisory",{"url":59,"source":60,"tags":74},[62,63],{"url":65,"source":66,"tags":76},[62],{"url":69,"source":70,"tags":78},[72],6,[81],{"id":82,"name":83,"description":84,"extendedDescription":85,"status":86,"abstraction":87,"structure":88},"CWE-522","Insufficiently Protected Credentials","The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and\u002For retrieval.","","Incomplete","Class","Simple",1,false,[],{"title":93,"metaDescription":94,"keywords":95,"canonicalUrl":96,"structuredData":97},"What is CVE-2023-29447? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2023-29447, a medium severity cyber security vulnerability from 2024. An insufficiently protected credentials vulnerability in ...","CVE-2023-29447, CVE-2023-29447 vulnerability, CVE-2023-29447 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2024, CVSS score, exploit, patch, remediation, ptc security, kepware_kepserverex vulnerability, thingworx_kepware_server vulnerability, thingworx_industrial_connectivity vulnerability","\u002Fwhat-is\u002Fcve-2023-29447",{"@context":98,"@type":99,"headline":93,"description":94,"datePublished":10,"dateModified":11,"author":100,"publisher":104,"about":108,"mainEntityOfPage":112,"articleSection":115,"keywords":116},"https:\u002F\u002Fschema.org","TechArticle",{"@type":101,"name":102,"url":103},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":101,"name":102,"url":103,"logo":105},{"@type":106,"url":107},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":109,"name":6,"description":110,"additionalType":111},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":113,"@id":114},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2023-29447","Cybersecurity","CVE-2023-29447, CVE-2023-29447 vulnerability, CVE-2023-29447 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[118,127,134],{"Operator":30,"Negate":30,"Nodes":119},[120],{"Operator":121,"Negate":90,"CPEMatch":122},"OR",[123],{"Vulnerable":4,"Criteria":49,"MatchCriteriaID":124,"VersionStartExcluding":30,"VersionStartIncluding":125,"VersionEndExcluding":30,"VersionEndIncluding":126},"BE266C92-959F-41CE-A8DA-DC3D336BC169","6.0.2107.0","6.14.263.0",{"Operator":30,"Negate":30,"Nodes":128},[129],{"Operator":121,"Negate":90,"CPEMatch":130},[131],{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":132,"VersionStartExcluding":30,"VersionStartIncluding":133,"VersionEndExcluding":30,"VersionEndIncluding":126},"99455409-195C-418C-A227-E9C67E70C2F3","6.8",{"Operator":30,"Negate":30,"Nodes":135},[136],{"Operator":121,"Negate":90,"CPEMatch":137},[138],{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":139,"VersionStartExcluding":30,"VersionStartIncluding":140,"VersionEndExcluding":30,"VersionEndIncluding":141},"10F80877-E2FA-4800-B4EB-BC87E35A9441","8.0","8.5",[],[],{"lastModified":11,"cacheTime":145,"version":146},1792347431427,"2.0",{"score":148,"band":149,"action":150,"scoredAt":151},18,"Info","Track","2026-10-16T07:00:24.879972+00:00"]