Skip to content
OpenAdvisories
Critical ICSA-24-305-01 2 CVEs

Rockwell Automation FactoryTalk ThinManager

Published Oct 31, 2024 · Updated Oct 31, 2024

Vendor: Rockwell Automation Product: ThinManager

Summary

Successful exploitation of these vulnerabilities could allow an attacker to send crafted messages to the device resulting in database manipulation or a denial-of-service condition.

Vulnerabilities 2

  • Critical 9.8
    CVE-2024-10386 EPSS 19%

    Rockwell Automation FactoryTalk ThinManager Authentication Vulnerability

    CVE-2024-10386 IMPACT An authentication vulnerability exists in the affected product. The vulnerability could allow a threat actor with network access to send crafted messages to the device, potentially resulting in database manipulation.

    Rockwell Automation FactoryTalk ThinManager ICS / OT
  • High 7.5
    CVE-2024-10387

    Rockwell Automation FactoryTalk ThinManager Denial-of-Service Vulnerability

    CVE-2024-10387 IMPACT A Denial-of-Service vulnerability exists in the affected product. The vulnerability could allow a threat actor with network access to send crafted messages to the device, potentially resulting in Denial-of-Service.

    Rockwell Automation FactoryTalk ThinManager ICS / OT

Revision history

  1. #1

    Initial Publication

References