PT-2024-4322 · Rockwell Automation · Thinmanager

Published 2024-06-25 · Updated 2024-09-16 · CVE-2024-5989

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Rockwell Automation ThinManager ThinServer (affected versions not specified)

Description The issue is related to improper input validation in the ThinServer component of Rockwell Automation ThinManager, allowing an unauthenticated threat actor to send a malicious message and invoke SQL injection into the program. This can cause a remote code execution condition. The exploitation involves sending a specially crafted SQL query.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2024-04810

CVE-2024-5989

Affected Products

Thinmanager

References · 6

• https://bdu.fstec.ru/vul/2024-04810 · Security Note
• https://rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1677.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-5989 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-5989 · Security Note
• https://t.me/cvenotify/84368 · Telegram Post
• https://t.me/cvenotify/94709 · Telegram Post