{"id":47491,"date":"2025-09-17T17:50:04","date_gmt":"2025-09-17T17:50:04","guid":{"rendered":"https:\/\/becolve.com\/blog\/vulnerabilidades-kepserverex\/"},"modified":"2025-09-17T17:50:04","modified_gmt":"2025-09-17T17:50:04","slug":"vulnerabilidades-kepserverex","status":"publish","type":"blog","link":"https:\/\/becolve.com\/pt-pt\/blog\/vulnerabilidades-kepserverex\/","title":{"rendered":"Vulnerabilidades KEPserverEX"},"content":{"rendered":"<p>A KEPserverEX anunciou vulnerabilidades em alguns dos seus produtos que poder\u00e3o provocar um <strong>desbordamento de buffer baseado em HEAP CWE-22 (CVE-2023-5908)<\/strong> e a <strong>valida\u00e7\u00e3o incorreta de certificado com desajuste de Host CWE-297 (CVE-2023-5909).<\/strong><br \/>\n Caso sejam exploradas com sucesso, os atacantes poder\u00e3o obter execu\u00e7\u00e3o de c\u00f3digo ao n\u00edvel do sistema Windows e provocar o bloqueio do produto, a filtragem de informa\u00e7\u00e3o sens\u00edvel ou a liga\u00e7\u00e3o sem a autentica\u00e7\u00e3o adequada.<\/p>\n<h4>Produtos afetados<\/h4>\n<ul>\n<li><strong>KEPServerEX:<\/strong> v6.14.263.0 e anteriores.<\/li>\n<li><strong>ThingWorx Kepware Server:<\/strong> v6.14.263.0 e anteriores.<\/li>\n<li><strong>ThingWorx Industrial Connectivity<\/strong>: todas as vers\u00f5es.<\/li>\n<li><strong>OPC-Aggregator<\/strong>: v6.14 e anteriores.<\/li>\n<li><strong>ThingWorx Kepware Edge<\/strong>: v1.7 e anteriores.<\/li>\n<li><strong>Rockwell Automation KEPServer Enterprise<\/strong>: v6.14.263.0 e anteriores.<\/li>\n<li><strong>GE Digital Industrial Gateway Server<\/strong>: v7.614 e anteriores.<\/li>\n<li><strong>Software Toolbox TOP Server<\/strong>: v6.14.263.0 e anteriores.<\/li>\n<\/ul>\n<h4>Existe alguma solu\u00e7\u00e3o?<\/h4>\n<p>Claro que sim! Basta atualizar o mais breve poss\u00edvel para as vers\u00f5es mais recentes aqueles n\u00f3s onde exista software afetado:<\/p>\n<ul>\n<li><strong>KEPServerEX, ThingWorx Kepware Server, ThingWorx Industrial Connectivity e OPC-Aggregator<\/strong>: para v6.15 (ou posterior). Recorde que a KEPServerEX lan\u00e7ou recentemente esta \u00faltima vers\u00e3o com <a href=\"https:\/\/becolve.com\/pt-pt\/blog\/kepserverex-v-6-15-ja-operacional-com-melhorias-na-conetividade-seguranca-capacidade-de-uso-e-muito-mais\/\">melhorias significativas em seguran\u00e7a<\/a>. <\/li>\n<li><strong>ThingWorx Kepware Edge<\/strong>: para v1.8 ou posterior.<\/li>\n<\/ul>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"contenida alignnone wp-image-26911 size-full\" src=\"https:\/\/becolve.com\/wp-content\/uploads\/2023\/12\/kepware-V-6.15-1.png\" width=\"600\" height=\"292\" srcset=\"https:\/\/becolve.com\/wp-content\/uploads\/2023\/12\/kepware-V-6.15-1.png 600w, https:\/\/becolve.com\/wp-content\/uploads\/2023\/12\/kepware-V-6.15-1-480x234.png 480w\" sizes=\"(min-width: 0px) and (max-width: 480px) 480px, (min-width: 481px) 600px, 100vw\" \/><\/p>\n<h4>Antecipe-se a futuros ataques<\/h4>\n<p>Ao instalar as vers\u00f5es mais recentes, resolve a falha de seguran\u00e7a atual, mas com as tecnologias a expandirem-se cada vez mais, nada lhe garante que evitar\u00e1 futuras amea\u00e7as para o seu portf\u00f3lio em geral.<br \/>\nPerante isto e para que nada lhe escape, aconselhamos que tome medidas preventivas que atenuem riscos desnecess\u00e1rios, como:<\/p>\n<ul>\n<li><strong>Minimizar a exposi\u00e7\u00e3o da rede<\/strong> para todos os dispositivos e\/ou sistemas do centro de controlo, assegurando-se de que n\u00e3o s\u00e3o acess\u00edveis a partir da Internet.<\/li>\n<li>Ubicar as redes do sistema de controlo e os dispositivos remotos atr\u00e1s das firewalls e isol\u00e1-los das redes comerciais.<\/li>\n<li>Usar um <strong>acesso remoto seguro<\/strong> (como poder\u00e1 ser uma <strong>VPN<\/strong> devidamente atualizada).<\/li>\n<\/ul>\n<p>Previamente \u00e0 implementa\u00e7\u00e3o destas medidas, realize uma an\u00e1lise de impacto e <a href=\"https:\/\/becolve.com\/soluciones-industria\/evaluacion-de-riesgos-de-ciberseguridad\/\">avalia\u00e7\u00e3o de riscos<\/a> para conhecer as suas necessidades em particular, com o seu ambiente operativo, arquitetura e implementa\u00e7\u00e3o de produtos na equa\u00e7\u00e3o.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>A KEPserverEX anunciou vulnerabilidades em alguns dos seus produtos que poder\u00e3o provocar um desbordamento de buffer baseado em HEAP CWE-22 (CVE-2023-5908) e a valida\u00e7\u00e3o incorreta de certificado com desajuste de Host CWE-297 (CVE-2023-5909). Caso sejam exploradas com sucesso, os atacantes poder\u00e3o obter execu\u00e7\u00e3o de c\u00f3digo ao n\u00edvel do sistema Windows e provocar o bloqueio do [&hellip;]<\/p>\n","protected":false},"author":38,"featured_media":26909,"menu_order":0,"template":"","categories":[969,977,958,968],"tags":[],"arquitectura":[1838,1842],"area":[187,186],"sector":[188,189,190,191,192,193,194,195,196,961,197,198,199,200,201],"experto":[],"weborigen":[],"productos-tax":[140],"soluciones-tax":[985,213],"marcas-tax":[383],"coauthors":[425],"class_list":["post-47491","blog","type-blog","status-publish","has-post-thumbnail","hentry","category-ciberseguranca","category-comunicacoes","category-evolucao-digital","category-integracao-it-ot","arquitectura-ciberseguranca-industrial","arquitectura-comunicacoes-industriais","area-industrial-pt-pt","area-infraestruturas","sector-aeroportos","sector-aguas-pt-pt","sector-automotivo","sector-data-center-pt-pt","sector-energia-pt-pt","sector-fb-pt-pt","sector-facility-management-pt-pt","sector-farma-pt-pt","sector-oem-pt-pt","sector-packaging-pt-pt","sector-portos","sector-quimica-pt-pt","sector-smart-city-pt-pt","sector-transporte-e-mobilidade","sector-tuneis","productos-tax-kepserverex","soluciones-tax-communication-drivers","soluciones-tax-communication-hub-pt-pt","marcas-tax-kepware"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.3 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Vulnerabilidades KEPserverEX | Becolve Digital<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/becolve.com\/pt-pt\/blog\/vulnerabilidades-kepserverex\/\" \/>\n<meta property=\"og:locale\" content=\"pt_PT\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Vulnerabilidades KEPserverEX | Becolve Digital\" \/>\n<meta property=\"og:description\" content=\"A KEPserverEX anunciou vulnerabilidades em alguns dos seus produtos que poder\u00e3o provocar um desbordamento de buffer baseado em HEAP CWE-22 (CVE-2023-5908) e a valida\u00e7\u00e3o incorreta de certificado com desajuste de Host CWE-297 (CVE-2023-5909). Caso sejam exploradas com sucesso, os atacantes poder\u00e3o obter execu\u00e7\u00e3o de c\u00f3digo ao n\u00edvel do sistema Windows e provocar o bloqueio do [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/becolve.com\/pt-pt\/blog\/vulnerabilidades-kepserverex\/\" \/>\n<meta property=\"og:site_name\" content=\"Becolve Digital\" \/>\n<meta property=\"og:image\" content=\"https:\/\/becolve.com\/wp-content\/uploads\/2023\/12\/Vulnerabilidades-KEPserverEX.jpeg\" \/>\n\t<meta property=\"og:image:width\" content=\"1000\" \/>\n\t<meta property=\"og:image:height\" content=\"622\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:site\" content=\"@Logitek_es\" \/>\n<meta name=\"twitter:label1\" content=\"Tempo estimado de leitura\" \/>\n\t<meta name=\"twitter:data1\" content=\"2 minutos\" \/>\n\t<meta name=\"twitter:label2\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data2\" content=\"Iria Di\u00e9guez\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/becolve.com\\\/pt-pt\\\/blog\\\/vulnerabilidades-kepserverex\\\/\",\"url\":\"https:\\\/\\\/becolve.com\\\/pt-pt\\\/blog\\\/vulnerabilidades-kepserverex\\\/\",\"name\":\"Vulnerabilidades KEPserverEX | Becolve Digital\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/becolve.com\\\/pt-pt\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/becolve.com\\\/pt-pt\\\/blog\\\/vulnerabilidades-kepserverex\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/becolve.com\\\/pt-pt\\\/blog\\\/vulnerabilidades-kepserverex\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/becolve.com\\\/wp-content\\\/uploads\\\/2023\\\/12\\\/Vulnerabilidades-KEPserverEX.jpeg\",\"datePublished\":\"2025-09-17T17:50:04+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/becolve.com\\\/pt-pt\\\/blog\\\/vulnerabilidades-kepserverex\\\/#breadcrumb\"},\"inLanguage\":\"pt-PT\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/becolve.com\\\/pt-pt\\\/blog\\\/vulnerabilidades-kepserverex\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"pt-PT\",\"@id\":\"https:\\\/\\\/becolve.com\\\/pt-pt\\\/blog\\\/vulnerabilidades-kepserverex\\\/#primaryimage\",\"url\":\"https:\\\/\\\/becolve.com\\\/wp-content\\\/uploads\\\/2023\\\/12\\\/Vulnerabilidades-KEPserverEX.jpeg\",\"contentUrl\":\"https:\\\/\\\/becolve.com\\\/wp-content\\\/uploads\\\/2023\\\/12\\\/Vulnerabilidades-KEPserverEX.jpeg\",\"width\":1000,\"height\":622},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/becolve.com\\\/pt-pt\\\/blog\\\/vulnerabilidades-kepserverex\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/becolve.com\\\/pt-pt\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Blog Items\",\"item\":\"https:\\\/\\\/becolve.com\\\/pt-pt\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Vulnerabilidades KEPserverEX\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/becolve.com\\\/pt-pt\\\/#website\",\"url\":\"https:\\\/\\\/becolve.com\\\/pt-pt\\\/\",\"name\":\"Becolve Digital\",\"description\":\"Impulsamos la transformaci\u00f3n digital en la industria e infraestructuras\",\"publisher\":{\"@id\":\"https:\\\/\\\/becolve.com\\\/pt-pt\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/becolve.com\\\/pt-pt\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"pt-PT\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/becolve.com\\\/pt-pt\\\/#organization\",\"name\":\"Becolve Digital\",\"url\":\"https:\\\/\\\/becolve.com\\\/pt-pt\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"pt-PT\",\"@id\":\"https:\\\/\\\/becolve.com\\\/pt-pt\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/becolve.com\\\/wp-content\\\/uploads\\\/2023\\\/04\\\/becolve-logo-h-black_200.png\",\"contentUrl\":\"https:\\\/\\\/becolve.com\\\/wp-content\\\/uploads\\\/2023\\\/04\\\/becolve-logo-h-black_200.png\",\"width\":200,\"height\":64,\"caption\":\"Becolve Digital\"},\"image\":{\"@id\":\"https:\\\/\\\/becolve.com\\\/pt-pt\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/Logitek_es\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/becolve-digital\\\/\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Vulnerabilidades KEPserverEX | Becolve Digital","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/becolve.com\/pt-pt\/blog\/vulnerabilidades-kepserverex\/","og_locale":"pt_PT","og_type":"article","og_title":"Vulnerabilidades KEPserverEX | Becolve Digital","og_description":"A KEPserverEX anunciou vulnerabilidades em alguns dos seus produtos que poder\u00e3o provocar um desbordamento de buffer baseado em HEAP CWE-22 (CVE-2023-5908) e a valida\u00e7\u00e3o incorreta de certificado com desajuste de Host CWE-297 (CVE-2023-5909). Caso sejam exploradas com sucesso, os atacantes poder\u00e3o obter execu\u00e7\u00e3o de c\u00f3digo ao n\u00edvel do sistema Windows e provocar o bloqueio do [&hellip;]","og_url":"https:\/\/becolve.com\/pt-pt\/blog\/vulnerabilidades-kepserverex\/","og_site_name":"Becolve Digital","og_image":[{"width":1000,"height":622,"url":"https:\/\/becolve.com\/wp-content\/uploads\/2023\/12\/Vulnerabilidades-KEPserverEX.jpeg","type":"image\/jpeg"}],"twitter_card":"summary_large_image","twitter_site":"@Logitek_es","twitter_misc":{"Tempo estimado de leitura":"2 minutos","Written by":"Iria Di\u00e9guez"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/becolve.com\/pt-pt\/blog\/vulnerabilidades-kepserverex\/","url":"https:\/\/becolve.com\/pt-pt\/blog\/vulnerabilidades-kepserverex\/","name":"Vulnerabilidades KEPserverEX | Becolve Digital","isPartOf":{"@id":"https:\/\/becolve.com\/pt-pt\/#website"},"primaryImageOfPage":{"@id":"https:\/\/becolve.com\/pt-pt\/blog\/vulnerabilidades-kepserverex\/#primaryimage"},"image":{"@id":"https:\/\/becolve.com\/pt-pt\/blog\/vulnerabilidades-kepserverex\/#primaryimage"},"thumbnailUrl":"https:\/\/becolve.com\/wp-content\/uploads\/2023\/12\/Vulnerabilidades-KEPserverEX.jpeg","datePublished":"2025-09-17T17:50:04+00:00","breadcrumb":{"@id":"https:\/\/becolve.com\/pt-pt\/blog\/vulnerabilidades-kepserverex\/#breadcrumb"},"inLanguage":"pt-PT","potentialAction":[{"@type":"ReadAction","target":["https:\/\/becolve.com\/pt-pt\/blog\/vulnerabilidades-kepserverex\/"]}]},{"@type":"ImageObject","inLanguage":"pt-PT","@id":"https:\/\/becolve.com\/pt-pt\/blog\/vulnerabilidades-kepserverex\/#primaryimage","url":"https:\/\/becolve.com\/wp-content\/uploads\/2023\/12\/Vulnerabilidades-KEPserverEX.jpeg","contentUrl":"https:\/\/becolve.com\/wp-content\/uploads\/2023\/12\/Vulnerabilidades-KEPserverEX.jpeg","width":1000,"height":622},{"@type":"BreadcrumbList","@id":"https:\/\/becolve.com\/pt-pt\/blog\/vulnerabilidades-kepserverex\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/becolve.com\/pt-pt\/"},{"@type":"ListItem","position":2,"name":"Blog Items","item":"https:\/\/becolve.com\/pt-pt\/blog\/"},{"@type":"ListItem","position":3,"name":"Vulnerabilidades KEPserverEX"}]},{"@type":"WebSite","@id":"https:\/\/becolve.com\/pt-pt\/#website","url":"https:\/\/becolve.com\/pt-pt\/","name":"Becolve Digital","description":"Impulsamos la transformaci\u00f3n digital en la industria e infraestructuras","publisher":{"@id":"https:\/\/becolve.com\/pt-pt\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/becolve.com\/pt-pt\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"pt-PT"},{"@type":"Organization","@id":"https:\/\/becolve.com\/pt-pt\/#organization","name":"Becolve Digital","url":"https:\/\/becolve.com\/pt-pt\/","logo":{"@type":"ImageObject","inLanguage":"pt-PT","@id":"https:\/\/becolve.com\/pt-pt\/#\/schema\/logo\/image\/","url":"https:\/\/becolve.com\/wp-content\/uploads\/2023\/04\/becolve-logo-h-black_200.png","contentUrl":"https:\/\/becolve.com\/wp-content\/uploads\/2023\/04\/becolve-logo-h-black_200.png","width":200,"height":64,"caption":"Becolve Digital"},"image":{"@id":"https:\/\/becolve.com\/pt-pt\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/Logitek_es","https:\/\/www.linkedin.com\/company\/becolve-digital\/"]}]}},"_links":{"self":[{"href":"https:\/\/becolve.com\/pt-pt\/wp-json\/wp\/v2\/blog\/47491","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/becolve.com\/pt-pt\/wp-json\/wp\/v2\/blog"}],"about":[{"href":"https:\/\/becolve.com\/pt-pt\/wp-json\/wp\/v2\/types\/blog"}],"author":[{"embeddable":true,"href":"https:\/\/becolve.com\/pt-pt\/wp-json\/wp\/v2\/users\/38"}],"version-history":[{"count":0,"href":"https:\/\/becolve.com\/pt-pt\/wp-json\/wp\/v2\/blog\/47491\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/becolve.com\/pt-pt\/wp-json\/wp\/v2\/media\/26909"}],"wp:attachment":[{"href":"https:\/\/becolve.com\/pt-pt\/wp-json\/wp\/v2\/media?parent=47491"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/becolve.com\/pt-pt\/wp-json\/wp\/v2\/categories?post=47491"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/becolve.com\/pt-pt\/wp-json\/wp\/v2\/tags?post=47491"},{"taxonomy":"arquitectura","embeddable":true,"href":"https:\/\/becolve.com\/pt-pt\/wp-json\/wp\/v2\/arquitectura?post=47491"},{"taxonomy":"area","embeddable":true,"href":"https:\/\/becolve.com\/pt-pt\/wp-json\/wp\/v2\/area?post=47491"},{"taxonomy":"sector","embeddable":true,"href":"https:\/\/becolve.com\/pt-pt\/wp-json\/wp\/v2\/sector?post=47491"},{"taxonomy":"experto","embeddable":true,"href":"https:\/\/becolve.com\/pt-pt\/wp-json\/wp\/v2\/experto?post=47491"},{"taxonomy":"weborigen","embeddable":true,"href":"https:\/\/becolve.com\/pt-pt\/wp-json\/wp\/v2\/weborigen?post=47491"},{"taxonomy":"productos-tax","embeddable":true,"href":"https:\/\/becolve.com\/pt-pt\/wp-json\/wp\/v2\/productos-tax?post=47491"},{"taxonomy":"soluciones-tax","embeddable":true,"href":"https:\/\/becolve.com\/pt-pt\/wp-json\/wp\/v2\/soluciones-tax?post=47491"},{"taxonomy":"marcas-tax","embeddable":true,"href":"https:\/\/becolve.com\/pt-pt\/wp-json\/wp\/v2\/marcas-tax?post=47491"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/becolve.com\/pt-pt\/wp-json\/wp\/v2\/coauthors?post=47491"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}