CVE-2024-6098
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
16/08/2024
Last modified:
19/08/2024
Description
When performing an online tag generation to devices which communicate <br />
using the ControlLogix protocol, a machine-in-the-middle, or a device <br />
that is not configured correctly, could deliver a response leading to <br />
unrestricted or unregulated resource allocation. This could cause a <br />
denial-of-service condition and crash the Kepware application. By <br />
default, these functions are turned off, yet they remain accessible for <br />
users who recognize and require their advantages.
Impact
Base Score 3.x
5.30
Severity 3.x
MEDIUM