Description
Due to an improper input validation, an unauthenticated threat actor can send a malicious message to invoke SQL injection into the program and cause a remote code execution condition on the Rockwell Automation ThinManager® ThinServer™.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Rockwell Automation | ThinManager® ThinServer™ | 11.0.0, 11.2.0, 12.0.0, 12.1.0, 13.0.0, 13.1.0, 13.2.0 | — |
Advisories 1
- ICSA-24-193-18 Rockwell Automation ThinManager ThinServer CISA ICS & IT advisories · Jul 11, 2024