Description
When performing an online tag generation to devices which communicate
using the ControlLogix protocol, a machine-in-the-middle, or a device
that is not configured correctly, could deliver a response leading to
unrestricted or unregulated resource allocation. This could cause a
denial-of-service condition and crash the Kepware application. By
default, these functions are turned off, yet they remain accessible for
users who recognize and require their advantages.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| PTC | Kepware ThingWorx Kepware Server | V6 | — |
| PTC | Kepware KEPServerEX | V6 | — |
| Software Toolbox | TOP Server | V6 | — |
| GE | IGS | V7.6x | — |
Advisories 1
- ICSA-24-228-11 PTC Kepware ThingWorx Kepware Server CISA ICS & IT advisories · Aug 15, 2024