NetSight
IP …
critical9.8

CVE-2024-5989

Due to an improper input validation, an unauthenticated threat actor can send a malicious message to invoke SQL injection into the program and cause a remote c…

Impact

Due to an improper input validation, an unauthenticated threat actor can send a malicious message to invoke SQL injection into the program and cause a remote code execution condition on the Rockwell Automation ThinManager® ThinServer™.

Affected products

VendorProductAffected versions
RockwellautomationThinmanager
from 11.1.0 before 11.1.8
from 11.2.0 before 11.2.9
from 12.0.0 before 12.0.7
from 12.1.0 before 12.1.8
from 13.0.0 before 13.0.5
from 13.1.0 before 13.1.3
RockwellautomationThinserver
from 11.1.0 before 11.1.8
from 11.2.0 before 11.2.9
from 12.0.0 before 12.0.7
from 12.1.0 before 12.1.8
from 13.0.0 before 13.0.5
from 13.1.0 before 13.1.3

Weakness classification

CWE-20

References