high7.5
CVE-2024-7986
A vulnerability exists in the Rockwell Automation ThinManager® ThinServer that allows a threat actor to disclose sensitive information.
Impact
A vulnerability exists in the Rockwell Automation ThinManager® ThinServer that allows a threat actor to disclose sensitive information. A threat actor can exploit this vulnerability by abusing the ThinServer™ service to read arbitrary files by creating a junction that points to the target directory.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Rockwellautomation | Thinmanager | from 11.1.0 before 11.1.8 from 11.2.0 before 11.2.9 from 12.0.0 before 12.0.7 from 12.1.0 before 12.1.8 from 13.0.0 before 13.0.5 from 13.1.0 before 13.1.3 |