high7.8
CVE-2024-7987
A remote code execution vulnerability exists in the Rockwell Automation ThinManager® ThinServer™ that allows a threat actor to execute arbitrary code with Syst…
Impact
A remote code execution vulnerability exists in the Rockwell Automation ThinManager® ThinServer™ that allows a threat actor to execute arbitrary code with System privileges. To exploit this vulnerability and a threat actor must abuse the ThinServer™ service by creating a junction and use it to upload arbitrary files.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Rockwellautomation | Thinmanager Thinserver | from 11.1.0 before 11.1.8 from 11.2.0 before 11.2.9 from 12.0.0 before 12.0.7 from 12.1.0 before 12.1.8 from 13.0.0 before 13.0.5 from 13.1.0 before 13.1.3 |