CVE:CVE-2020-27263
CNNVD:CNNVD-202012-1301
Kepware Kepserverex是美国Kepware公司的一个可与多种工业设备进行通讯的应用软件。该软件支持150多个通讯协议，支持通过单个平台为企业提供可靠实时的数据。
Kepware KEPServerEX 存在安全漏洞，本地攻击者可以溢出缓冲区，导致服务器崩溃或数据泄漏。
solution:Upgrade ge industrial_gateway_server to a higher version than 7.66,7.68.804,and avoid the version 7.66,7.68.804; Upgrade ptc kepware_kepserverex to a higher version than 6.0,6.9,and avoid the version 6.0,6.9; Upgrade ptc opc-aggregator to a higher version than -; Upgrade ptc thingworx_industrial_connectivity to a higher version than -; Upgrade ptc thingworx_kepware_server to a higher version than 6.8,6.9,and avoid the version 6.8,6.9; Upgrade rockwellautomation kepserver_enterprise to a higher version than 6.6.504.0,6.9.572.0,and avoid the version 6.6.504.0,6.9.572.0; Upgrade softwaretoolbox top_server to a higher version than 6.9,and avoid the version [6.0,6.9]