GCVE - cpe:2.3:a:rockwellautomation:thinmanager:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:rockwellautomation:thinmanager:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Rockwellautomation (`483fb14e-bfe0-5dc5-b460-aca202063cba`)
Product	Thinmanager (`bf0d695b-1c42-563b-a699-fa75614cac56`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-9065`	vulnerable	2026-06-08 07:45:21.651222	Rockwell Automation ThinManager® Server-Side Request Forgery Vulnerability A server-side request forgery security issue exists within Rockwell Automation ThinManager® software due to the lack of input sanitization. Authenticated attackers can exploit this vulnerability by specifying external SMB paths, exposing the ThinServer® service account NTLM hash. Published: 2025-09-09T12:51:42.091Z Updated: 2025-09-09T13:23:24.291Z Open on db.gcve.eu Reference links https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1743.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-3618`	vulnerable	2026-06-08 07:23:09.527545	Local Privilege Escalation Vulnerability A denial-of-service vulnerability exists in the Rockwell Automation ThinManager. The software fails to adequately verify the outcome of memory allocation while processing Type 18 messages. If exploited, a threat actor could cause a denial-of-service on the target software. Published: 2025-04-15T17:19:53.368Z Updated: 2025-04-17T17:25:38.739Z Open on db.gcve.eu Reference links https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1727.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-3617`	vulnerable	2026-06-08 07:23:09.526071	Local Privilege Escalation in ThinManager® A privilege escalation vulnerability exists in the Rockwell Automation ThinManager. When the software starts up, files are deleted in the temporary folder causing the Access Control Entry of the directory to inherit permissions from the parent directory. If exploited, a threat actor could inherit elevated privileges. Published: 2025-04-15T17:17:25.324Z Updated: 2025-04-17T17:25:03.386Z Open on db.gcve.eu Reference links https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1727.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-7986`	vulnerable	2026-06-08 06:58:24.039217	Rockwell Automation ThinManager® ThinServer™ Information Disclosure A vulnerability exists in the Rockwell Automation ThinManager® ThinServer that allows a threat actor to disclose sensitive information. A threat actor can exploit this vulnerability by abusing the ThinServer™ service to read arbitrary files by creating a junction that points to the target directory. Published: 2024-08-23T11:51:55.080Z Updated: 2024-08-28T16:21:02.832Z Open on db.gcve.eu Reference links https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1692.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-5990`	vulnerable	2026-06-08 06:58:17.116495	ThinManager® ThinServer™ Improper Input Validation Vulnerability Due to an improper input validation, an unauthenticated threat actor can send a malicious message to a monitor thread within Rockwell Automation ThinServer™ and cause a denial-of-service condition on the affected device. Published: 2024-06-25T16:11:01.407Z Updated: 2025-08-27T20:42:59.671Z Open on db.gcve.eu Reference links https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1677.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-5989`	vulnerable	2026-06-08 06:58:17.114270	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-5988`	vulnerable	2026-06-08 06:58:17.110841	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-45826`	vulnerable	2026-06-08 06:48:09.088405	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-10387`	vulnerable	2026-06-08 06:23:46.401831	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-10386`	vulnerable	2026-06-08 06:23:46.395106	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-2913`	vulnerable	2026-06-08 06:02:43.643321	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-2443`	vulnerable	2026-06-08 06:02:42.317833	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-27857`	vulnerable	2026-06-08 05:57:42.325624	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-27856`	vulnerable	2026-06-08 05:57:42.325107	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-27855`	vulnerable	2026-06-08 05:57:42.322909	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-38742`	vulnerable	2026-06-08 05:47:16.953039	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.