CVE-2024-6098CWE-770

PTC Kepware ThingWorx Kepware Server Allocation of Resources Without Limits or Throttling

Medium · published August 16, 2024

CVSS v4.0
5.9
EPSS
0%
Percentile
32.7
In the wild
Unconfirmed
What it is

When performing an online tag generation to devices which communicate

using the ControlLogix protocol, a machine-in-the-middle, or a device

that is not configured correctly, could deliver a response leading to

unrestricted or unregulated resource allocation. This could cause a

denial-of-service condition and crash the Kepware application. By

default, these functions are turned off, yet they remain accessible for

users who recognize and require their advantages.

The record
Technical detail
CVSS v4.0
5.9 · MEDIUM
Vector
CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS
0.00397 · 32.7th percentile
Weakness
CWE-770 · Allocation of Resources Without Limits or Throttling
Published
2024-08-16T14:57Z
EPSS history
Timeline
  • 16 AUG 14:57Z
    PTC Kepware ThingWorx Kepware Server Allocation of Resources Without Limits or Throttling
    cvelistv5