8.5
High
CVE-2024-7987 A remote code execution vulnerability exists in the Rockwell Automation ThinManager® ThinServer™ that allows a threat…
Description
A remote code execution vulnerability exists in the Rockwell Automation ThinManager® ThinServer™ that allows a threat actor to execute arbitrary code with System privileges. To exploit this vulnerability and a threat actor must abuse the ThinServer™ service by creating a junction and use it to upload arbitrary files.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| ThinManager® ThinServer™ | Versions not published | |
| thinmanager_thinserver 13.2 | 13.2.0 → 13.2.1 | No fix stated |
| thinmanager_thinserver 13.1 | 13.1.0 → 13.1.2 | No fix stated |
| thinmanager_thinserver 13.0 | 13.0.0 → 13.0.4 | No fix stated |
| thinmanager_thinserver 12.1 | 12.1.0 → 12.1.7 | No fix stated |
| thinmanager_thinserver 12.0 | 12.0.0 → 12.0.6 | No fix stated |
| thinmanager_thinserver 11.2 | 11.2.0 → 11.2.8 | No fix stated |
| thinmanager_thinserver 11.1 | 11.1.0 → 11.1.7 | No fix stated |
Other CVEs of ThinManager® ThinServer™
The 6 CVEs of ThinManager® ThinServer™ →
CVE-2024-7988
A remote code execution vulnerability exists in the Rockwell Automation ThinManager® ThinServer™ that allows a threat…
9.3
Critical
CVE-2024-7986
A vulnerability exists in the Rockwell Automation ThinManager® ThinServer that allows a threat actor to disclose…
6.8
Medium
CVE-2024-5990
Due to an improper input validation, an unauthenticated threat actor can send a malicious message to a monitor thread…
8.7
High
CVE-2024-5989
Due to an improper input validation, an unauthenticated threat actor can send a malicious message to invoke SQL…
9.3
Critical