CVE-2024-6098

Name of the Vulnerable Software and Affected Versions: PTC Kepware ThingWorx Kepware Server (affected versions not specified)

Description: The issue arises when performing online tag generation to devices that communicate using the ControlLogix protocol. A machine-in-the-middle or a device that is not configured correctly could deliver a response leading to unrestricted or unregulated resource allocation. This could cause a denial-of-service condition and crash the Kepware application. By default, these functions are turned off, yet they remain accessible for users who recognize and require their advantages.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.