Description
If exploited, this vulnerability could cause a SuiteLink server to consume excessive system resources and slow down processing of Data I/O for the duration of the attack.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| AVEVA | SuiteLink Server | ≤ 3.7.0 | — |
| AVEVA | Historian | ≤ 2023 R2 P01 | — |
| AVEVA | InTouch | ≤ 2023 R2 P01 | — |
| AVEVA | Application Server | ≤ 2023 R2 P01 | — |
| AVEVA | Communication Drivers Pack | ≤ 2023 R2 | — |
| AVEVA | Batch Management | ≤ 2023 | — |
Advisories 1
- ICSA-24-226-01 AVEVA SuiteLink Server CISA ICS & IT advisories · Aug 13, 2024
References
- https://www.cisa.gov/news-events/ics-advisories/icsa-24-226-01 government-resource