Skip to content
OpenAdvisories
Medium · 5.3 CVE-2024-6098 EUVD-2024-47249GHSA-w2rc-qg2j-54hv

PTC Kepware ThingWorx Kepware Server Allocation of Resources Without Limits or Throttling

Published Aug 16, 2024 · Updated Aug 19, 2024 · Assigned by icscert

Description

When performing an online tag generation to devices which communicate
using the ControlLogix protocol, a machine-in-the-middle, or a device
that is not configured correctly, could deliver a response leading to
unrestricted or unregulated resource allocation. This could cause a
denial-of-service condition and crash the Kepware application. By
default, these functions are turned off, yet they remain accessible for
users who recognize and require their advantages.

Affected products

VendorProductAffectedFixed
PTC Kepware ThingWorx Kepware Server V6 —
PTC Kepware KEPServerEX V6 —
Software Toolbox TOP Server V6 —
GE IGS V7.6x —

Advisories 1

References