Rockwell Automation Thinmanager® Thinserver™ vulnerabilities
6 vulnerabilities
Known vulnerabilities in Rockwell Automation Thinmanager® Thinserver™, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2024-7988rockwell automationthinmanager® thinserver™+1
EPSS score4.78%
A remote code execution vulnerability exists in the Rockwell Automation ThinManager® ThinServer™ that allows a threat actor to execute arbitrary code with System privileges. This vulnerability exists due to the lack of proper data input validation, which allows files to be overwritten.CVE-2024-7987rockwell automationthinmanager® thinserver™+1EPSS score0.32%
A remote code execution vulnerability exists in the Rockwell Automation ThinManager® ThinServer™
that allows a threat actor to execute arbitrary code with System privileges. To exploit this vulnerability and a threat actor must abuse the ThinServer™ service by creating a junction and use it to upload arbitrary files.CVE-2024-7986rockwell automationthinmanager® thinserver™+1EPSS score0.56%
A vulnerability exists in the Rockwell Automation ThinManager® ThinServer that allows a threat actor to disclose sensitive information. A threat actor can exploit this vulnerability by abusing the ThinServer™ service to read arbitrary files by creating a junction that points to the target directory.CVE-2024-5990rockwell automationthinmanager® thinserver™+2EPSS score2.25%
Due to an improper input validation, an unauthenticated threat actor can send a malicious message to a monitor thread within Rockwell Automation ThinServer™ and cause a denial-of-service condition on the affected device.CVE-2024-5989rockwell automationthinmanager® thinserver™+2EPSS score2.39%
Due to an improper input validation, an unauthenticated threat actor can send a malicious message to invoke SQL injection into the program and cause a remote code execution condition on the Rockwell Automation ThinManager® ThinServer™.CVE-2024-5988rockwell automationthinmanager® thinserver™+2EPSS score2.65%
Due to an improper input validation, an unauthenticated threat actor can send a malicious message to invoke a local or remote executable and cause a remote code execution condition on the Rockwell Automation ThinManager® ThinServer™.