Skip to content
OpenAdvisories
Critical ICSA-24-242-01 3 CVEs

Rockwell Automation ThinManager ThinServer

Published Aug 29, 2024 · Updated Aug 29, 2024

Vendor: Rockwell Automation Product: ThinManager® ThinServer™

Summary

Successful exploitation of these vulnerabilities could allow an attacker to read arbitrary files and execute arbitrary code with system privileges.

Vulnerabilities 3

  • Critical 9.3
    CVE-2024-7988

    ThinManager® ThinServer™ Information Disclosure and Remote Code Execution Vulnerabilities

    A remote code execution vulnerability exists in the Rockwell Automation ThinManager® ThinServer™ that allows a threat actor to execute arbitrary code with System privileges. This vulnerability exists due to the lack of proper data input validation, which allo…

    Rockwell Automation ThinManager® ThinServer™ ICS / OT
  • High 8.5
    CVE-2024-7987

    Rockwell Automation ThinManager® ThinServer™ Information Disclosure and Remote Code Execution Vulnerabilities

    A remote code execution vulnerability exists in the Rockwell Automation ThinManager® ThinServer™ that allows a threat actor to execute arbitrary code with System privileges. To exploit this vulnerability and a threat actor must abuse the ThinServer™ service b…

    Rockwell Automation ThinManager® ThinServer™ ICS / OT
  • Medium 6.8
    CVE-2024-7986

    Rockwell Automation ThinManager® ThinServer™ Information Disclosure

    A vulnerability exists in the Rockwell Automation ThinManager® ThinServer that allows a threat actor to disclose sensitive information. A threat actor can exploit this vulnerability by abusing the ThinServer™ service to read arbitrary files by creating a junc…

    Rockwell Automation ThinManager® ThinServer™ ICS / OT

Revision history

  1. #1

    Initial Publication

References