What’s Vulnerable › Vulnerabilities

CVE-2024-7113: Allocation of Resources Without Limits or Throttling in AVEVA SuiteLink Server

• Severity: high (CVSS 8.7 v4.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-08-13 · updated 2026-06-17
• Weakness: CWE-770

Description

If exploited, this vulnerability could cause a SuiteLink server to consume excessive system resources and slow down processing of Data I/O for the duration of the attack.

Affected products

• AVEVA Application Server: through 2023 R2 P01
• AVEVA Batch Management: through 2023
• AVEVA Communication Drivers Pack: through 2023 R2
• AVEVA Historian: through 2023 R2 P01
• AVEVA InTouch: through 2023 R2 P01
• AVEVA SuiteLink Server: through 3.7.0

References

• https://www.cisa.gov/news-events/ics-advisories/icsa-24-226-01

Get alerted when CVE-2024-7113 or the next vulnerability affects your stack