8.5
Élevée
CVE-2024-7987 A remote code execution vulnerability exists in the Rockwell Automation ThinManager® ThinServer™ that allows a threat…
Description
A remote code execution vulnerability exists in the Rockwell Automation ThinManager® ThinServer™ that allows a threat actor to execute arbitrary code with System privileges. To exploit this vulnerability and a threat actor must abuse the ThinServer™ service by creating a junction and use it to upload arbitrary files.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| ThinManager® ThinServer™ | Versions non publiées | |
| thinmanager_thinserver 13.2 | 13.2.0 → 13.2.1 | Pas de correctif indiqué |
| thinmanager_thinserver 13.1 | 13.1.0 → 13.1.2 | Pas de correctif indiqué |
| thinmanager_thinserver 13.0 | 13.0.0 → 13.0.4 | Pas de correctif indiqué |
| thinmanager_thinserver 12.1 | 12.1.0 → 12.1.7 | Pas de correctif indiqué |
| thinmanager_thinserver 12.0 | 12.0.0 → 12.0.6 | Pas de correctif indiqué |
| thinmanager_thinserver 11.2 | 11.2.0 → 11.2.8 | Pas de correctif indiqué |
| thinmanager_thinserver 11.1 | 11.1.0 → 11.1.7 | Pas de correctif indiqué |
Autres CVE de ThinManager® ThinServer™
Les 6 CVE de ThinManager® ThinServer™ →
CVE-2024-7988
A remote code execution vulnerability exists in the Rockwell Automation ThinManager® ThinServer™ that allows a threat…
9.3
Critique
CVE-2024-7986
A vulnerability exists in the Rockwell Automation ThinManager® ThinServer that allows a threat actor to disclose…
6.8
Moyenne
CVE-2024-5990
Due to an improper input validation, an unauthenticated threat actor can send a malicious message to a monitor thread…
8.7
Élevée
CVE-2024-5989
Due to an improper input validation, an unauthenticated threat actor can send a malicious message to invoke SQL…
9.3
Critique