CVE-2023-5909CWE-297

Improper Validation of Certificate with Host Mismatch in PTC KEPServerEx

High · published November 30, 2023

CVSS v3.1
7.5
EPSS
0%
Percentile
37.0
In the wild
Unconfirmed
What it is

KEPServerEX does not properly validate certificates from clients which may allow unauthenticated users to connect.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00438 · 37.0th percentile
Weakness
CWE-297 · Improper Validation of Certificate with Host Mismatch
Published
2023-11-30T22:05Z
EPSS history
Timeline
  • 30 NOV 22:05Z
    Improper Validation of Certificate with Host Mismatch in PTC KEPServerEx
    cvelistv5