Description
CVE-2024-10386 IMPACT
An authentication
vulnerability exists in the affected product. The vulnerability could allow a
threat actor with network access to send crafted messages to the device, potentially
resulting in database manipulation.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Rockwell Automation | FactoryTalk ThinManager | 11.2.0-11.2.9, 12.0.0-12.0.7, 12.1.0-12.1.8, 13.0.0-13.0.5, 13.1.0-13.1.3, 13.2.0-13.2.2, 14.0.0 | — |
Advisories 2
- WID-SEC-2024-3322 Rockwell Automation FactoryTalk ThinManager: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 31, 2024
- ICSA-24-305-01 Rockwell Automation FactoryTalk ThinManager CISA ICS & IT advisories · Oct 31, 2024