What if I cannot upgrade SmartSockets or SmartSockets Product Family Modules (RTworks) at this time?
If you are not able to upgrade the SmartSockets or SmartSockets Product Family Modules (RTworks) at this time, you can limit your exposure to data injection attacks by securing TCP access to SmartSockets servers and clients. Applications using the TipcConnAccept API entry point can mitigate the risk of a rogue application exploiting the defect by limiting TCP access to the TipcConnAccept. This restriction can be implemented with a firewall configuration that allows only specific remote IP addresses to initiate a connection to the TipcConnAccept application, and physical security for the specified remote hosts.
