Rockwell Automation ThinManager ThinServer Privilege Management Error Vulnerability

Rockwell Automation ThinManager is the United States Rockwell Rockwell Automation a thin client management software. A privilege management error vulnerability exists in Rockwell Automation ThinManager ThinServer, which can be exploited by an attacker to submit a special request to read system fi...

CVE-2024-7986

A vulnerability exists in the Rockwell Automation ThinManager® ThinServer that allows a threat actor to disclose sensitive information. A threat actor can exploit this vulnerability by abusing the ThinServer™ service to read arbitrary files by creating a junction that points to the target directo...

CVE-2024-7986

A vulnerability exists in the Rockwell Automation ThinManager® ThinServer that allows a threat actor to disclose sensitive information. A threat actor can exploit this vulnerability by abusing the ThinServer™ service to read arbitrary files by creating a junction that points to the target directo...

CVE-2024-7986 Rockwell Automation ThinManager® ThinServer™ Information Disclosure

A vulnerability exists in the Rockwell Automation ThinManager® ThinServer that allows a threat actor to disclose sensitive information. A threat actor can exploit this vulnerability by abusing the ThinServer™ service to read arbitrary files by creating a junction that points to the target directo...

CVE-2024-7986

CVE-2024-7986 affects Rockwell Automation ThinManager ThinServer. The vulnerability allows reading arbitrary files by abusing ThinServer to create a junction pointing to a target directory (information disclosure). Affected ThinServer versions include 11.1.0–11.1.7, 11.2.x, 12.x, 13.x (per PT-202...

CVE-2024-7986 Rockwell Automation ThinManager® ThinServer™ Information Disclosure

A vulnerability exists in the Rockwell Automation ThinManager® ThinServer that allows a threat actor to disclose sensitive information. A threat actor can exploit this vulnerability by abusing the ThinServer™ service to read arbitrary files by creating a junction that points to the target directo...

CVE-2024-7986: Incorrect Permission Assignment for Critical Resource

A vulnerability exists in the Rockwell Automation ThinManager® ThinServer that allows a threat actor to disclose sensitive information. A threat actor can exploit this vulnerability by abusing the ThinServer™ service to read arbitrary files by creating a junction that points to the target directo...

Rockwell Automation ThinManager ThinServer Arbitrary File Creation Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Rockwell Automation ThinManager. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

Rockwell Automation ThinManager ThinServer Unrestricted File Upload Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Rockwell Automation ThinManager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the ThinServer service. The issue results from the lack of proper...

Rockwell Automation ThinManager ThinServer Arbitrary File Read Information Disclosure Vulnerability

This vulnerability allows local attackers to read arbitrary files on affected installations of Rockwell Automation ThinManager. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

Rockwell Automation ThinManager ThinServer

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION : Exploitable remotely/low attack complexity Vendor : Rockwell Automation Equipment : ThinManager ThinServer Vulnerabilities : Improper Input Validation 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker...

ThinServer Code Execution

The vulnerability of the ThinServer component of Rockwell Automation’s ThinManager application platform for centralized application management exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

Rockwell Automation ThinManager ThinServer Input Validation Error Vulnerability (CNVD-2024-38544)

Rockwell Automation ThinManager is a thin client management software from Rockwell Automation, Inc. It allows thin clients to be assigned to multiple remote desktop servers simultaneously. An input validation error vulnerability exists in Rockwell Automation ThinManager ThinServer, which can be...

Rockwell Automation ThinManager ThinServer Input Validation Error Vulnerability (CNVD-2024-38543)

Rockwell Automation ThinManager is a thin client management software from Rockwell Automation, Inc. It allows thin clients to be assigned to multiple remote desktop servers simultaneously. An input validation error vulnerability exists in Rockwell Automation ThinManager ThinServer, which can be...

Rockwell Automation ThinManager ThinServer Input Validation Error Vulnerability (CNVD-2024-38545)

Rockwell Automation ThinManager is a thin client management software from Rockwell Automation, Inc. It allows thin clients to be assigned to multiple remote desktop servers simultaneously. An input validation error vulnerability exists in Rockwell Automation ThinManager ThinServer, which can be...

ThinServer Code Execution

The vulnerability of the ThinServer component of Rockwell Automation’s centralized application management platform, ThinManager, relates to errors in processing input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted SQL query...

Rockwell Automation ThinManager ThinServer RCE (CVE-2024-5988)

Binary data rockwellthinmanagerthinservercve-2024-5988.nbin...

CVE-2024-5989

Due to an improper input validation, an unauthenticated threat actor can send a malicious message to invoke SQL injection into the program and cause a remote code execution condition on the Rockwell Automation ThinManager® ThinServer™...

CVE-2024-5988

Due to an improper input validation, an unauthenticated threat actor can send a malicious message to invoke a local or remote executable and cause a remote code execution condition on the Rockwell Automation ThinManager® ThinServer™...

CVE-2024-5988

Due to an improper input validation, an unauthenticated threat actor can send a malicious message to invoke a local or remote executable and cause a remote code execution condition on the Rockwell Automation ThinManager® ThinServer™...