NetSight
IP …
high7.5

CVE-2024-5990

Due to an improper input validation, an unauthenticated threat actor can send a malicious message to a monitor thread within Rockwell Automation ThinServer™ an…

Impact

Due to an improper input validation, an unauthenticated threat actor can send a malicious message to a monitor thread within Rockwell Automation ThinServer™ and cause a denial-of-service condition on the affected device.

Affected products

VendorProductAffected versions
RockwellautomationThinmanager
from 11.1.0 before 11.1.8
from 11.2.0 before 11.2.9
from 12.0.0 before 12.0.7
from 12.1.0 before 12.1.8
from 13.0.0 before 13.0.4
from 13.1.0 before 13.1.2
RockwellautomationThinserver
from 11.1.0 before 11.1.8
from 11.2.0 before 11.2.9
from 12.0.0 before 12.0.7
from 12.1.0 before 12.1.8
from 13.0.0 before 13.0.4
from 13.1.0 before 13.1.2

Weakness classification

CWE-20

References