PT-2024-7412 · Rockwell Automation · Thinmanager Thinserver

Nicholas Zubrisky · Published 2024-05-01 · Updated 2024-08-31 · CVE-2024-7988

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Rockwell Automation ThinManager ThinServer (affected versions not specified)

Description: A remote code execution vulnerability exists in the Rockwell Automation ThinManager ThinServer due to the lack of proper data input validation, allowing files to be overwritten. This vulnerability allows a threat actor to execute arbitrary code with System privileges. Approximately 893 results are found to be potentially affected.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2024-08786

CVE-2024-7988

ZDI-24-1158

Affected Products

Thinmanager Thinserver

References · 34

• https://bdu.fstec.ru/vul/2024-08786 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-24-1158 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-7988 · Security Note
• https://osv.dev/vulnerability/CVE-2024-7988 · Vendor Advisory
• https://rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1692.html · Vendor Advisory
• https://twitter.com/cracbot/status/1829761112276951325 · Twitter Post
• https://twitter.com/Dhananj82759483/status/1827324933732757854 · Twitter Post
• https://twitter.com/patchnow24x7/status/1827322967661121952 · Twitter Post
• https://twitter.com/patchnow24x7/status/1827328677765640551 · Twitter Post
• https://twitter.com/Dhananj82759483/status/1827324859434578319 · Twitter Post
• https://zerodayinitiative.com/advisories/ZDI-CAN-24040 · Note
• https://twitter.com/Dinosn/status/1828651964185407693 · Twitter Post
• https://twitter.com/patchnow24x7/status/1827328724146254258 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1826722195785101561 · Twitter Post
• https://twitter.com/patchnow24x7/status/1827319415417008327 · Twitter Post