Skip to content
OpenAdvisories
Medium · 6.8 CVE-2024-45826 EUVD-2024-41620GHSA-jj65-79wr-35v9

ThinManager® Code Execution Vulnerability

Published Sep 12, 2024 · Updated Sep 12, 2024 · Assigned by Rockwell

Description

CVE-2024-45826 IMPACT
Due to improper input validation, a path traversal and remote code execution vulnerability exists when the ThinManager® processes a crafted POST request. If exploited, a user can install an executable file.

Affected products

VendorProductAffectedFixed
Rockwell Automation ThinManager 13.1.0-13.1.2, 13.2.0-13.2.1 —

Advisories 2

References