CVE-2024-7988: falha crítica em Rockwell Automation ThinManager® ThinServer™
ThinManager® ThinServer™ Information Disclosure and Remote Code Execution Vulnerabilities
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
28Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 9.3epss 4.8%
A remote code execution vulnerability exists in the Rockwell Automation ThinManager® ThinServer™ that allows a threat actor to execute arbitrary code with System privileges. This vulnerability exists due to the lack of proper data input validation, which allows files to be overwritten.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Produtos afetados
Rockwell Automation · ThinManager® ThinServer™CVEs relacionadas — Rockwell Automation ThinManager® ThinServer™
No mesmo produto, das mais perigosas para as menos.
CVE-2024-5988CRITICALRockwell Automation ThinManager® ThinServer™ Improper Input Validation VulnerabilityEPSS 2.7%CVE-2024-5989CRITICALRockwell Automation ThinManager® ThinServer™ Improper Input Validation VulnerabilityEPSS 2.4%CVE-2024-5990HIGHThinManager® ThinServer™ Improper Input Validation VulnerabilityEPSS 2.3%CVE-2024-7986MEDIUMRockwell Automation ThinManager® ThinServer™ Information DisclosureEPSS 0.6%CVE-2024-7987HIGHRockwell Automation ThinManager® ThinServer™ Information Disclosure and Remote Code Execution VulnerabilitiesEPSS 0.3%