critical9.8
CVE-2024-7988
A remote code execution vulnerability exists in the Rockwell Automation ThinManager® ThinServer™ that allows a threat actor to execute arbitrary code with Syst…
Impact
A remote code execution vulnerability exists in the Rockwell Automation ThinManager® ThinServer™ that allows a threat actor to execute arbitrary code with System privileges. This vulnerability exists due to the lack of proper data input validation, which allows files to be overwritten.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Rockwellautomation | Thinmanager Thinserver | from 11.1.0 before 11.1.8 from 11.2.0 before 11.2.9 from 12.0.0 before 12.0.7 from 12.1.0 before 12.1.8 from 13.0.0 before 13.0.5 from 13.1.0 before 13.1.3 |