CVE-2023-3825

PTC’s KEPServerEX Versions 6.0 to 6.14.263 are vulnerable to being made to read a recursively defined object that leads to uncontrolled resource consumption. KEPServerEX uses OPC UA, a protocol which defines various object types that can be nested to create complex arrays. It does not implement a check to see if such an object is recursively defined, so an attack could send a maliciously created message that the decoder would try to decode until the stack overflowed and the device crashed.

• CWE-400
• CWE-787

• https://www.cisa.gov/news-events/ics-advisories/icsa-23-208-02Third Party Advisory, US Government Resource
• https://www.cisa.gov/news-events/ics-advisories/icsa-23-208-02Third Party Advisory, US Government Resource

Published

Jul 31, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-38244Adobe Acrobat Reader versions 23.003.20244 (and earlier) and…5.5
• CVE-2023-38245Adobe Acrobat Reader versions 23.003.20244 (and earlier) and…5.5
• CVE-2023-38246Adobe Acrobat Reader versions 23.003.20244 (and earlier) and…7.8
• CVE-2023-38247Adobe Acrobat Reader versions 23.003.20244 (and earlier) and…5.5
• CVE-2023-38248Adobe Acrobat Reader versions 23.003.20244 (and earlier) and…5.5
• CVE-2023-38249Adobe Commerce versions 2.4.7-beta1 (and earlier), 2.4.6-p2 …6.6
• CVE-2023-38250Adobe Commerce versions 2.4.7-beta1 (and earlier), 2.4.6-p2 …6.6
• CVE-2023-38251Adobe Commerce versions 2.4.7-beta1 (and earlier), 2.4.6-p2 …5.3
• CVE-2023-38252An out-of-bounds read flaw was found in w3m, in the Strnew_s…5.5
• CVE-2023-38253An out-of-bounds read flaw was found in w3m, in the growbuf_…5.5
• CVE-2023-38254Microsoft Message Queuing (MSMQ) Denial of Service Vulnerabi…6.5
• CVE-2023-38255 A potential attacker with or without (cooki…6.1