CVE-2024-7986
High
Description
A vulnerability exists in the Rockwell Automation ThinManager® ThinServer that allows a threat actor to disclose sensitive information. A threat actor can exploit this vulnerability by abusing the ThinServer™ service to read arbitrary files by creating a junction that points to the target directory.
SeverityHigh
CVSS7.5
Exploit probability—
ProductRockwellautomation Thinmanager
PublishedAug 23, 2024
First seenAug 23, 2024
Weakness typeCWE-732CWE-732
How to fix
Update
- rockwellautomation thinmanager11.1.8, 11.2.9, 12.0.7, 12.1.8, 13.0.5, 13.1.3, 13.2.2 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rockwellautomation thinmanager | 11.1.0 ≤ v < 11.1.8, 11.2.0 ≤ v < 11.2.9, 12.0.0 ≤ v < 12.0.7, 12.1.0 ≤ v < 12.1.8, 13.0.0 ≤ v < 13.0.5, 13.1.0 ≤ v < 13.1.3, 13.2.0 ≤ v < 13.2.2 | 11.1.8, 11.2.9, 12.0.7, 12.1.8, 13.0.5, 13.1.3, 13.2.2 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.