← Back

CVE-2024-7988

nvd nist
Published: Aug 26, 2024Modified: Jun 17, 2026

JSON object

Loading...
9.3
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Show more
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XShow less
Source: PSIRT@rockwellautomation.com (Secondary)

Description

A remote code execution vulnerability exists in the Rockwell Automation ThinManager® ThinServer™ that allows a threat actor to execute arbitrary code with System privileges. This vulnerability exists due to the lack of proper data input validation, which allows files to be overwritten.

Affected (7)

Rockwellautomation
1 product
Thinmanager Thinserver
Configuration A
7 vulnerable
Vulnerable SoftwareAffected Versions
Thinmanager Thinserver
From 11.1.0 to 11.1.8
Thinmanager Thinserver
From 11.2.0 to 11.2.9
Thinmanager Thinserver
From 12.0.0 to 12.0.7
Thinmanager Thinserver
From 12.1.0 to 12.1.8
Thinmanager Thinserver
From 13.0.0 to 13.0.5
Thinmanager Thinserver
From 13.1.0 to 13.1.3
Thinmanager Thinserver
From 13.2.0 to 13.2.2

Related CWEs

CWE-20
Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (1)

Source: PSIRT@rockwellautomation.com
Vendor Advisory

Timeline

No history available yet.