Vulnerability Description
Due to an improper input validation, an unauthenticated threat actor can send a malicious message to invoke a local or remote executable and cause a remote code execution condition on the Rockwell Automation ThinManager® ThinServer™.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Rockwellautomation | Thinmanager | >= 11.1.0, < 11.1.8 |
| Rockwellautomation | Thinserver | >= 11.1.0, < 11.1.8 |
Related Weaknesses (CWE)
References
- https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisoVendor Advisory
- https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisoVendor Advisory
FAQ
What is CVE-2024-5988?
CVE-2024-5988 is a vulnerability with a CVSS score of 9.8 (CRITICAL). Due to an improper input validation, an unauthenticated threat actor can send a malicious message to invoke a local or remote executable and cause a remote code execution condition on the Rockwell Aut...
How severe is CVE-2024-5988?
CVE-2024-5988 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2024-5988?
Check the references section above for vendor advisories and patch information. Affected products include: Rockwellautomation Thinmanager, Rockwellautomation Thinserver.