The IEC104 slave accepted TCP connections from any IP address because the Process Gateway failed to enforce the configured master-IP restrictions, allowing unauthorized masters to connect.
The issue has been addressed and the behavior is now as expected.
To benefit from this fix: