9.3
Critique
CVE-2024-7988 A remote code execution vulnerability exists in the Rockwell Automation ThinManager® ThinServer™ that allows a threat…
Description
A remote code execution vulnerability exists in the Rockwell Automation ThinManager® ThinServer™ that allows a threat actor to execute arbitrary code with System privileges. This vulnerability exists due to the lack of proper data input validation, which allows files to be overwritten.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| ThinManager® ThinServer™ | Versions non publiées | |
| thinmanager_thinserver 13.2 | 13.2.0 → 13.2.1 | Pas de correctif indiqué |
| thinmanager_thinserver 13.1 | 13.1.0 → 13.1.2 | Pas de correctif indiqué |
| thinmanager_thinserver 13.0 | 13.0.0 → 13.0.4 | Pas de correctif indiqué |
| thinmanager_thinserver 12.1 | 12.1.0 → 12.1.7 | Pas de correctif indiqué |
| thinmanager_thinserver 12.0 | 12.0.0 → 12.0.6 | Pas de correctif indiqué |
| thinmanager_thinserver 11.2 | 11.2.0 → 11.2.8 | Pas de correctif indiqué |
| thinmanager_thinserver 11.0 | 11.0 → 11.1.7 | Pas de correctif indiqué |
Autres CVE de ThinManager® ThinServer™
Les 6 CVE de ThinManager® ThinServer™ →
CVE-2024-7987
A remote code execution vulnerability exists in the Rockwell Automation ThinManager® ThinServer™ that allows a threat…
8.5
Élevée
CVE-2024-7986
A vulnerability exists in the Rockwell Automation ThinManager® ThinServer that allows a threat actor to disclose…
6.8
Moyenne
CVE-2024-5990
Due to an improper input validation, an unauthenticated threat actor can send a malicious message to a monitor thread…
8.7
Élevée
CVE-2024-5989
Due to an improper input validation, an unauthenticated threat actor can send a malicious message to invoke SQL…
9.3
Critique