NetSight
IP …
critical9.8

CVE-2024-5988

Due to an improper input validation, an unauthenticated threat actor can send a malicious message to invoke a local or remote executable and cause a remote cod…

Impact

Due to an improper input validation, an unauthenticated threat actor can send a malicious message to invoke a local or remote executable and cause a remote code execution condition on the Rockwell Automation ThinManager® ThinServer™.

Affected products

VendorProductAffected versions
RockwellautomationThinmanager
from 11.1.0 before 11.1.8
from 11.2.0 before 11.2.9
from 12.0.0 before 12.0.7
from 12.1.0 before 12.1.8
from 13.0.0 before 13.0.5
from 13.1.0 before 13.1.3
RockwellautomationThinserver
from 11.1.0 before 11.1.8
from 11.2.0 before 11.2.9
from 12.0.0 before 12.0.7
from 12.1.0 before 12.1.8
from 13.0.0 before 13.0.5
from 13.1.0 before 13.1.3

Weakness classification

CWE-20

References