CVE:CVE-2023-0754
CNNVD:CNNVD-202302-1949
PTC ThingWorx Edge是美国PTC公司的一个为工业物联网（IIoT）设计的完整的端到端技术平台。
ThingWorx Edge C-SDK 2.2.12.1052版本及之前版本存在输入验证错误漏洞，该漏洞源于整数溢出。攻击者利用该漏洞使服务器崩溃并远程执行任意代码。
solution:Upgrade ge digital_industrial_gateway_server to a higher version than 7.612,and avoid the version (,7.612]; Upgrade ptc kepware_server to a higher version than 6.12,and avoid the version (,6.12]; Upgrade ptc kepware_serverex to a higher version than 6.12,and avoid the version (,6.12]; Upgrade ptc thingworx_.net-sdk to a higher version than 5.8.4.971,and avoid the version (,5.8.4.971]; Upgrade ptc thingworx_edge_c-sdk to a higher version than 2.2.12.1052,and avoid the version (,2.2.12.1052]; Upgrade ptc thingworx_edge_microserver to a higher version than 5.4.10.0,and avoid the version (,5.4.10.0]; Upgrade ptc thingworx_industrial_connectivity to a higher version than *; Upgrade ptc thingworx_kepware_edge to a higher version than 1.5,and avoid the version (,1.5]; Upgrade rockwellautomation kepserver_enterprise to a higher version than 6.12,and avoid the version (,6.12]