Skip to content
Sign in
6.8 Medium

CVE-2024-7986 A vulnerability exists in the Rockwell Automation ThinManager® ThinServer that allows a threat actor to disclose…

Description

A vulnerability exists in the Rockwell Automation ThinManager® ThinServer that allows a threat actor to disclose sensitive information. A threat actor can exploit this vulnerability by abusing the ThinServer™ service to read arbitrary files by creating a junction that points to the target directory.

Affected products and versions

Product Affected versions Fixed in
ThinManager® ThinServer™ Versions not published

Other CVEs of ThinManager® ThinServer™

The 6 CVEs of ThinManager® ThinServer™ →
CVE-2024-7988 A remote code execution vulnerability exists in the Rockwell Automation ThinManager® ThinServer™ that allows a threat… 9.3 Critical CVE-2024-7987 A remote code execution vulnerability exists in the Rockwell Automation ThinManager® ThinServer™ that allows a threat… 8.5 High CVE-2024-5990 Due to an improper input validation, an unauthenticated threat actor can send a malicious message to a monitor thread… 8.7 High CVE-2024-5989 Due to an improper input validation, an unauthenticated threat actor can send a malicious message to invoke SQL… 9.3 Critical
Track this CVE