Vulnerability Description
Due to an improper input validation, an unauthenticated threat actor can send a malicious message to a monitor thread within Rockwell Automation ThinServer™ and cause a denial-of-service condition on the affected device.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Rockwellautomation | Thinmanager | >= 11.1.0, < 11.1.8 |
| Rockwellautomation | Thinserver | >= 11.1.0, < 11.1.8 |
Related Weaknesses (CWE)
References
- https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisoVendor Advisory
- https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisoVendor Advisory
FAQ
What is CVE-2024-5990?
CVE-2024-5990 is a vulnerability with a CVSS score of 7.5 (HIGH). Due to an improper input validation, an unauthenticated threat actor can send a malicious message to a monitor thread within Rockwell Automation ThinServer™ and cause a denial-of-service condition on ...
How severe is CVE-2024-5990?
CVE-2024-5990 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2024-5990?
Check the references section above for vendor advisories and patch information. Affected products include: Rockwellautomation Thinmanager, Rockwellautomation Thinserver.