CVE-2024-10387

Published: Oct 25, 2024Modified: Jun 17, 2026

8.7

Vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XShow less

Source: PSIRT@rockwellautomation.com (Secondary)

Description

CVE-2024-10387 IMPACT A Denial-of-Service vulnerability exists in the affected product. The vulnerability could allow a threat actor with network access to send crafted messages to the device, potentially resulting in Denial-of-Service.

Affected (7)

Products: Rockwellautomation: Thinmanager

Rockwellautomation

1 product

Thinmanager

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Rockwellautomation Thinmanager	From 11.2.0 to 11.2.10
Rockwellautomation Thinmanager	From 12.0.0 to 12.0.8
Rockwellautomation Thinmanager	From 12.1.0 to 12.1.9
Rockwellautomation Thinmanager	From 13.0.0 to 13.0.6
Rockwellautomation Thinmanager	From 13.1.0 to 13.1.4
Rockwellautomation Thinmanager	From 13.2.0 to 13.2.3
Rockwellautomation Thinmanager	Version 14.0.0

Related CWEs

CWE-125

Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

References (1)

https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1708.html

Source: PSIRT@rockwellautomation.com

Vendor Advisory

Timeline

No history available yet.