Skip to content
OpenAdvisories
Critical ICSA-24-193-18 3 CVEs

Rockwell Automation ThinManager ThinServer

Published Jul 11, 2024 · Updated Jul 11, 2024

Vendor: Rockwell Automation Product: ThinManager® ThinServer™

Summary

Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary code or cause a denial-of-service condition.

Vulnerabilities 3

  • Critical 9.3
    CVE-2024-5988

    Rockwell Automation ThinManager® ThinServer™ Improper Input Validation Vulnerability

    Due to an improper input validation, an unauthenticated threat actor can send a malicious message to invoke a local or remote executable and cause a remote code execution condition on the Rockwell Automation ThinManager® ThinServer™.

    Rockwell Automation ThinManager® ThinServer™ ICS / OT
  • Critical 9.3
    CVE-2024-5989

    Rockwell Automation ThinManager® ThinServer™ Improper Input Validation Vulnerability

    Due to an improper input validation, an unauthenticated threat actor can send a malicious message to invoke SQL injection into the program and cause a remote code execution condition on the Rockwell Automation ThinManager® ThinServer™.

    Rockwell Automation ThinManager® ThinServer™ ICS / OT
  • High 8.7
    CVE-2024-5990

    ThinManager® ThinServer™ Improper Input Validation Vulnerability

    Due to an improper input validation, an unauthenticated threat actor can send a malicious message to a monitor thread within Rockwell Automation ThinServer™ and cause a denial-of-service condition on the affected device.

    Rockwell Automation ThinManager® ThinServer™ ICS / OT

Revision history

  1. #1

    Initial Publication

References