Skip to content
OpenAdvisories
High ICSA-25-119-01 2 CVEs

Rockwell Automation ThinManager

Published Apr 29, 2025 · Updated May 6, 2025 · Revision 2

Vendor: Rockwell Automation Product: ThinManager

Summary

Successful exploitation of these vulnerabilities could allow an attacker to escalate privileges and cause a denial-of-service condition.

Vulnerabilities 2

  • High 8.5
    CVE-2025-3617

    Local Privilege Escalation in ThinManager®

    A privilege escalation vulnerability exists in the Rockwell Automation ThinManager. When the software starts up, files are deleted in the temporary folder causing the Access Control Entry of the directory to inherit permissions from the parent directory. If e…

    Rockwell Automation ThinManager ICS / OT
  • High 8.5
    CVE-2025-3618

    Local Privilege Escalation Vulnerability

    A denial-of-service vulnerability exists in the Rockwell Automation ThinManager. The software fails to adequately verify the outcome of memory allocation while processing Type 18 messages. If exploited, a threat actor could cause a denial-of-service on the ta…

    Rockwell Automation ThinManager ICS / OT

Revision history

  1. #2

    Revision - Fixing typos

  2. #1

    Initial Publication

References