Skip to content
OpenAdvisories
Critical · 9.3 CVE-2024-5988 EUVD-2024-47104GHSA-2774-v47p-f5v6

Rockwell Automation ThinManager® ThinServer™ Improper Input Validation Vulnerability

Published Jun 25, 2024 · Updated Aug 27, 2025 · Assigned by Rockwell

Description

Due to an improper input validation, an unauthenticated threat actor can send a malicious message to invoke a local or remote executable and cause a remote code execution condition on the Rockwell Automation ThinManager® ThinServer™.

Affected products

VendorProductAffectedFixed
Rockwell Automation ThinManager® ThinServer™ 11.1.0, 11.2.0, 12.0.0, 12.1.0, 13.0.0, 13.1.0, 13.2.0 —

Advisories 1

References