Paper/Archive/CVE-2024-7988

CVE-2024-7988

Rockwell Automation ThinManager® ThinServer™ — ThinManager® ThinServer™ Information Disclosure and Remote Code Execution Vulnerabilities

EPSS 5%CVSS 9.8

critical.is priorityof 100

CVSS 9.8 (ADP)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 91.9.919 × 2018.4 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

A remote code execution vulnerability exists in the Rockwell Automation ThinManager® ThinServer™ that allows a threat actor to execute arbitrary code with System privileges. This vulnerability exists due to the lack of proper data input validation, which allows files to be overwritten.

Affected

ProductAffectedFixed inSource

ThinManager® ThinServer™11.1.0-11.1.7 11.2.0-11.2.8 12.0.0-12.0.6 12.1.0-12.1.7 13.0.0-13.0.4 13.1.0-13.1.2 13.2.0-13.2.1–CNA

thinmanager_thinserver11.0 – 11.1.7–CISA-ADP

thinmanager_thinserver11.2.0 – 11.2.8–CISA-ADP

thinmanager_thinserver12.0.0 – 12.0.6–CISA-ADP

thinmanager_thinserver12.1.0 – 12.1.7–CISA-ADP

thinmanager_thinserver13.0.0 – 13.0.4–CISA-ADP

thinmanager_thinserver13.1.0 – 13.1.2–CISA-ADP

thinmanager_thinserver13.2.0 – 13.2.1–CISA-ADP

Scores by source

CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Rockwell (CNA)9.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refrockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1692.html