CVE-2024-7987: falha de alta gravidade em Rockwell Automation ThinManager® ThinServer™
Rockwell Automation ThinManager® ThinServer™ Information Disclosure and Remote Code Execution Vulnerabilities
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 8.5epss 0.3%
A remote code execution vulnerability exists in the Rockwell Automation ThinManager® ThinServer™
that allows a threat actor to execute arbitrary code with System privileges. To exploit this vulnerability and a threat actor must abuse the ThinServer™ service by creating a junction and use it to upload arbitrary files.
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Produtos afetados
Rockwell Automation · ThinManager® ThinServer™CVEs relacionadas — Rockwell Automation ThinManager® ThinServer™
No mesmo produto, das mais perigosas para as menos.
CVE-2024-7988CRITICALThinManager® ThinServer™ Information Disclosure and Remote Code Execution VulnerabilitiesEPSS 4.8%CVE-2024-5988CRITICALRockwell Automation ThinManager® ThinServer™ Improper Input Validation VulnerabilityEPSS 2.7%CVE-2024-5989CRITICALRockwell Automation ThinManager® ThinServer™ Improper Input Validation VulnerabilityEPSS 2.4%CVE-2024-5990HIGHThinManager® ThinServer™ Improper Input Validation VulnerabilityEPSS 2.3%CVE-2024-7986MEDIUMRockwell Automation ThinManager® ThinServer™ Information DisclosureEPSS 0.6%