Skip to content
OpenAdvisories
High · 8.5 CVE-2025-3618 EUVD-2025-15035GHSA-4w84-6c7g-5c25

Local Privilege Escalation Vulnerability

Published Apr 15, 2025 · Updated Apr 17, 2025 · Assigned by Rockwell

Description

A denial-of-service vulnerability exists in the Rockwell Automation ThinManager. The software fails to adequately verify the outcome of memory allocation while processing Type 18 messages. If exploited, a threat actor could cause a denial-of-service on the target software.

Affected products

VendorProductAffectedFixed
Rockwell Automation ThinManager v14.0.1 and earlier —

Advisories 1

References