8.6
Élevée
CVE-2025-9065 A server-side request forgery security issue exists within Rockwell Automation ThinManager® software due to the lack…
Description
A server-side request forgery security issue exists within Rockwell Automation ThinManager® software due to the lack of input sanitization. Authenticated attackers can exploit this vulnerability by specifying external SMB paths, exposing the ThinServer® service account NTLM hash.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| ThinManager | Versions non publiées |
Autres CVE de ThinManager
Les 4 CVE de ThinManager →
CVE-2025-3618
A denial-of-service vulnerability exists in the Rockwell Automation ThinManager
8.5
Élevée
CVE-2024-45826
CVE-2024-45826 IMPACT Due to improper input validation, a path traversal and remote code execution vulnerability…
8.5
Élevée
CVE-2023-2443
Rockwell Automation ThinManager product allows the use of medium strength ciphers
7.5
Élevée