SuiteLink Vulnerability Could Disrupt Processing of Data I/O
CVE-2024-7113

Currently unrated

Key Information:

Vendor

Aveva

Status
Suitelink Server
Historian
Intouch
Application Server
Vendor
CVE Published:
13 August 2024

What is CVE-2024-7113?

If exploited, this vulnerability could cause a SuiteLink server to consume excessive system resources and slow down processing of Data I/O for the duration of the attack.

Affected Version(s)

Application Server 0 <= 2023 R2 P01

Batch Management 0 <= 2023

Communication Drivers Pack 0 <= 2023 R2

References

https://www.cisa.gov/news-events/ics-advisories/icsa-24-2...
government-resource

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

DOE CESER's CyTRICS program at Idaho National Laboratory reported this vulnerability to AVEVA.
.
CVE-2024-7113 : SuiteLink Vulnerability Could Disrupt Processing of Data I/O