T5BusEIPS: Idle TCP connections are not automatically closed.
Description
The EtherNet/IP Adapter (T5BusEIPS ) does not close TCP connections when these are idle and do not send any data. This can lead to a denial of service for valid EtherNet/IP Adapter when the maximum number of 124 TCP connections are used by (other) non-EtherNet/IP clients.
The issue has been addressed. The EtherNet/IP Adapter (T5BusEIPS) provides a new configuration option "Inactivity Timeout (s)" to automatically close idle TCP connections on port 44818. By default, the inactivity timeout is disabled with a value of -1. When a timeout value >0 is configured, the oldest TCP connection on which no data was received is closed after the timeout time, when reaching the maximum limit of 124 TCP connections.
To benefit from this fix:
- Update your zenon Software Platform to the latest build of zenon 12 or higher.
Item ID: 286897
Version: 14.00 Build: 293273
Version: 12.00 Build: 301428
Related Articles
zenLogSrv: no TCP keep alive for listening socket
Description The TCP server of zenLogSrv.exe did not send TCP keep alive messages to check if the TCP connection is still available. The issue has been addressed by automatically enabling TCP server now automatically enables the TCP keep alive for the ...
Remote-Transport: no TCP keep alive for listening socket
Description The TCP server of process zensysSrv (used for remote transport) did not send TCP keep alive messages to check if the TCP connection is still available. The issue has been addressed by automatically enabling TCP keep alive for the ...
In Docker-Compose: no TCP keep alive for listening socket, port 50780
Description In Docker the TCP server of process zenLogSrv.exe did not send a TCP keep alive to check if the TCP connection is still available. The issue has been addressed by automatically enabling TCP server now automatically enables the TCP keep ...
T5BusEIPS: EtherNet/IP Adapter does not make use of TCP Keep Alive
Description The EtherNet/IP Adapter (T5BusEIPS) does not make use of TCP keep alive messages to check if the TCP connection from an EtherNet/IP Scanner is still OK. The issue has been addressed and the T5BusEIPS enables a TCP keep alive for the ...
CD_SVA_2025_01: zenon Remote Transport Vulnerability
What you should know The vulnerability targets a specific function of the zenon Remote Transport Service. The underlying weaknesses is CWE-306: ‘Missing Authentication for Critical Function’. The versions listed below are affected by this ...