CVE:CVE-2022-2825
CNNVD:CNNVD-202208-4442
Kepware Kepserverex是美国Kepware公司的一个可与多种工业设备进行通讯的应用软件。该软件支持150多个通讯协议，支持通过单个平台为企业提供可靠实时的数据。
Kepware KEPServerEX V6.11.718.0版本存在安全漏洞，该漏洞源于在将用户提供的数据复制到基于堆栈的缓冲区之前未对其长度进行适当验证。攻击者利用该漏洞在SYSTEM环境中执行代码。
solution:Upgrade ge industrial_gateway_server to a higher version than 7.612,and avoid the version (,7.612); Upgrade ptc kepware_kepserverex to a higher version than 6.12,and avoid the version (,6.12); Upgrade ptc opc-aggregator to a higher version than 6.12,and avoid the version (,6.12); Upgrade ptc thingworx_industrial_connectivity to a higher version than -; Upgrade ptc thingworx_kepware_edge to a higher version than 1.4,and avoid the version (,1.4); Upgrade ptc thingworx_kepware_server to a higher version than 6.12,and avoid the version (,6.12); Upgrade rockwellautomation kepserver_enterprise to a higher version than 6.12,and avoid the version (,6.12); Upgrade softwaretoolbox top_server to a higher version than 6.12,and avoid the version (,6.12)