Server communication with a controller can lead to remote code execution using a specially crafted message from the controller. See Honeywell Security Notification for recommendations on upgrading and versioning.
https://www.cisa.gov/news-events/ics-advisories/icsa-24-116-04