Rockwell Automation ThinManager ThinServer

🗓️ 29 Aug 2024 06:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics🔗 www.cisa.gov👁 14 Views

Rockwell Automation ThinManager ThinServer version 11.1.0 to 13.2.1 affected by improper privilege management, incorrect permission assignment, and improper input validation vulnerabilitie

Reporter	Title	Published	Views	Family All 33
BDU FSTEC	The vulnerability of the ThinServer component of Rockwell Automation’s ThinManager application management platform, which stems from incorrect input validation, allows attackers to execute arbitrary code with system privileges.	31 Oct 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the ThinServer component of the Rockwell Automation ThinManager application management platform allows a attacker to execute arbitrary code.	15 Nov 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the ThinServer component of Rockwell Automation’s ThinManager platform for centralized application management allows a perpetrator to gain unauthorized access to protected information.	15 Nov 202400:00	–	bdu_fstec
Circl	CVE-2024-7986	23 Aug 202414:37	–	circl
Circl	CVE-2024-7987	26 Aug 202417:59	–	circl
Circl	CVE-2024-7988	26 Aug 202417:59	–	circl
CNNVD	Rockwell Automation ThinManager 安全漏洞	26 Aug 202400:00	–	cnnvd
CNNVD	Rockwell Automation ThinManager 安全漏洞	26 Aug 202400:00	–	cnnvd
CNVD	Rockwell Automation ThinManager ThinServer Privilege Management Error Vulnerability	26 Aug 202400:00	–	cnvd
CNVD	Rockwell Automation ThinManager ThinServer Remote Code Execution Vulnerability (CNVD-2024-46734)	26 Aug 202400:00	–	cnvd

Source	Link
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2024/icsa-24-242-01.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-24-242-01
cisa	www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
cisa	www.cisa.gov/resources-tools/resources/ics-recommended-practices
cisa	www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
cisa	www.cisa.gov/topics/industrial-control-systems
us-cert	www.us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
cisa	www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B
cisa	www.cisa.gov/uscert/sites/default/files/publications/emailscams0905.pdf
cisa	www.cisa.gov/uscert/ncas/tips/ST04-014

29 Aug 2024 06:00Current

8.3High risk

Vulners AI Score8.3

CVSS 3.17.8 - 9.8

CVSS 49.3

EPSS0.20296

SSVC