CVE-2024-6098

CVE-2024-6098 describes a denial-of-service vulnerability in Kepware applications when generating online tags for devices using the ControlLogix protocol. A man-in-the-middle attack or misconfigured device could exploit this by delivering a malicious response, leading to unrestricted resource allocation and crashing the Kepware application. Rated Medium severity (CVSS 5.3), this attack requires network access and high attack complexity, but no user interaction. While the affected functions are off by default, they are accessible to users. There is currently no evidence of active exploitation, public exploit code, or significant community discussion regarding this vulnerability.