9.3
Critical
CVE-2024-7988 A remote code execution vulnerability exists in the Rockwell Automation ThinManager® ThinServer™ that allows a threat…
Description
A remote code execution vulnerability exists in the Rockwell Automation ThinManager® ThinServer™ that allows a threat actor to execute arbitrary code with System privileges. This vulnerability exists due to the lack of proper data input validation, which allows files to be overwritten.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| ThinManager® ThinServer™ | Versions not published | |
| thinmanager_thinserver 13.2 | 13.2.0 → 13.2.1 | No fix stated |
| thinmanager_thinserver 13.1 | 13.1.0 → 13.1.2 | No fix stated |
| thinmanager_thinserver 13.0 | 13.0.0 → 13.0.4 | No fix stated |
| thinmanager_thinserver 12.1 | 12.1.0 → 12.1.7 | No fix stated |
| thinmanager_thinserver 12.0 | 12.0.0 → 12.0.6 | No fix stated |
| thinmanager_thinserver 11.2 | 11.2.0 → 11.2.8 | No fix stated |
| thinmanager_thinserver 11.0 | 11.0 → 11.1.7 | No fix stated |
Other CVEs of ThinManager® ThinServer™
The 6 CVEs of ThinManager® ThinServer™ →
CVE-2024-7987
A remote code execution vulnerability exists in the Rockwell Automation ThinManager® ThinServer™ that allows a threat…
8.5
High
CVE-2024-7986
A vulnerability exists in the Rockwell Automation ThinManager® ThinServer that allows a threat actor to disclose…
6.8
Medium
CVE-2024-5990
Due to an improper input validation, an unauthenticated threat actor can send a malicious message to a monitor thread…
8.7
High
CVE-2024-5989
Due to an improper input validation, an unauthenticated threat actor can send a malicious message to invoke SQL…
9.3
Critical