CVE-2024-7987 Rockwell Automation ThinManager® ThinServer™ Information Disclosure and Remote Code Execution Vulnerabilities

A remote code execution vulnerability exists in the Rockwell Automation ThinManager® ThinServer™ that allows a threat actor to execute arbitrary code with System privileges. To exploit this vulnerability and a threat actor must abuse the ThinServer™ service by creating a junction and use it to...

CVE-2024-7987 Rockwell Automation ThinManager® ThinServer™ Information Disclosure and Remote Code Execution Vulnerabilities

A remote code execution vulnerability exists in the Rockwell Automation ThinManager® ThinServer™ that allows a threat actor to execute arbitrary code with System privileges. To exploit this vulnerability and a threat actor must abuse the ThinServer™ service by creating a junction and use it to...

CVE-2024-7987

Rockwell Automation ThinManager ThinServer contains a remote code execution vulnerability (CVE-2024-7987) exposed by the ThinServer service. The issue arises from Incorrect Permission Assignment for a Critical Resource, enabling an attacker to execute arbitrary code with SYSTEM privileges by abus...

Rockwell Automation ThinManager ThinServer Remote Code Execution Vulnerability (CNVD-2024-46734)

Rockwell Automation ThinManager is the United States Rockwell Rockwell Automation a thin client management software. A remote code execution vulnerability exists in Rockwell Automation ThinManager ThinServer, which can be exploited by an authenticated, local attacker to submit a special request t...

Rockwell Automation ThinManager ThinServer Privilege Management Error Vulnerability

Rockwell Automation ThinManager is the United States Rockwell Rockwell Automation a thin client management software. A privilege management error vulnerability exists in Rockwell Automation ThinManager ThinServer, which can be exploited by an attacker to submit a special request to read system fi...

Rockwell Automation ThinManager 安全漏洞

Rockwell Automation ThinManager is the United States Rockwell Rockwell Automation a thin client management software. A remote code execution vulnerability exists in Rockwell Automation ThinManager ThinServer, which can be exploited by an authenticated, local attacker to submit a special request t...

Rockwell Automation ThinManager 安全漏洞

Rockwell Automation ThinManager is the United States Rockwell Rockwell Automation a thin client management software. A remote code execution vulnerability exists in Rockwell Automation ThinManager ThinServer, which can be exploited by an authenticated, remote attacker to submit a special request,...

Rockwell Automation ThinManager ThinServer Remote Code Execution Vulnerability

Rockwell Automation ThinManager is the United States Rockwell Rockwell Automation a thin client management software. A remote code execution vulnerability exists in Rockwell Automation ThinManager ThinServer, which can be exploited by an authenticated, remote attacker to submit a special request,...

CVE-2024-7986

A vulnerability exists in the Rockwell Automation ThinManager® ThinServer that allows a threat actor to disclose sensitive information. A threat actor can exploit this vulnerability by abusing the ThinServer™ service to read arbitrary files by creating a junction that points to the target directo...

CVE-2024-7986

A vulnerability exists in the Rockwell Automation ThinManager® ThinServer that allows a threat actor to disclose sensitive information. A threat actor can exploit this vulnerability by abusing the ThinServer™ service to read arbitrary files by creating a junction that points to the target directo...

CVE-2024-7986

CVE-2024-7986 affects Rockwell Automation ThinManager ThinServer. The vulnerability allows reading arbitrary files by abusing ThinServer to create a junction pointing to a target directory (information disclosure). Affected ThinServer versions include 11.1.0–11.1.7, 11.2.x, 12.x, 13.x (per PT-202...

CVE-2024-7986 Rockwell Automation ThinManager® ThinServer™ Information Disclosure

A vulnerability exists in the Rockwell Automation ThinManager® ThinServer that allows a threat actor to disclose sensitive information. A threat actor can exploit this vulnerability by abusing the ThinServer™ service to read arbitrary files by creating a junction that points to the target directo...

CVE-2024-7986 Rockwell Automation ThinManager® ThinServer™ Information Disclosure

A vulnerability exists in the Rockwell Automation ThinManager® ThinServer that allows a threat actor to disclose sensitive information. A threat actor can exploit this vulnerability by abusing the ThinServer™ service to read arbitrary files by creating a junction that points to the target directo...

Rockwell Automation ThinManager ThinServer Arbitrary File Read Information Disclosure Vulnerability

This vulnerability allows local attackers to read arbitrary files on affected installations of Rockwell Automation ThinManager. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

Rockwell Automation ThinManager ThinServer Arbitrary File Creation Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Rockwell Automation ThinManager. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

Rockwell Automation ThinManager ThinServer Unrestricted File Upload Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Rockwell Automation ThinManager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the ThinServer service. The issue results from the lack of proper...

Rockwell Automation ThinManager ThinServer

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION : Exploitable remotely/low attack complexity Vendor : Rockwell Automation Equipment : ThinManager ThinServer Vulnerabilities : Improper Input Validation 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker...

The vulnerability of the ThinServer component of the Rockwell Automation ThinManager application management platform allows a attacker to execute arbitrary code.

The vulnerability of the ThinServer component of Rockwell Automation’s ThinManager application platform for centralized application management exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

Rockwell Automation ThinManager ThinServer Input Validation Error Vulnerability (CNVD-2024-38545)

Rockwell Automation ThinManager is a thin client management software from Rockwell Automation, Inc. It allows thin clients to be assigned to multiple remote desktop servers simultaneously. An input validation error vulnerability exists in Rockwell Automation ThinManager ThinServer, which can be...

Rockwell Automation ThinManager ThinServer Input Validation Error Vulnerability (CNVD-2024-38543)

Rockwell Automation ThinManager is a thin client management software from Rockwell Automation, Inc. It allows thin clients to be assigned to multiple remote desktop servers simultaneously. An input validation error vulnerability exists in Rockwell Automation ThinManager ThinServer, which can be...