Factorytalk Thinmanager
Approved changes feed: RSS · Atom
cpe:2.3:a:rockwell_automation:factorytalk_thinmanager:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Rockwell Automation (dde15a4c-943a-57fe-888d-2bc03ade6545) |
|---|---|
| Product | Factorytalk Thinmanager (d9a2a0b2-09de-54a1-8083-ab580268ea06) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-11917 |
vulnerable | 2026-07-29 00:23:31.792173 |
ThinManager® - Path Traversal via API
A path traversal security issue exists within Rockwell Automation ThinManager® software due to improper limitation of file save operations within the API. An authenticated attacker could exploit this vulnerability to write arbitrary files to restricted system directories outside of the application's intended directory.
Published: 2026-07-14T15:07:41.808Z
Updated: 2026-07-14T15:54:01.677Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-10387 |
vulnerable | 2026-06-08 06:23:46.401882 |
Rockwell Automation FactoryTalk ThinManager Denial-of-Service Vulnerability
HIGH (7.5)
CVE-2024-10387 IMPACT
A Denial-of-Service
vulnerability exists in the affected product. The vulnerability could allow a
threat actor with network access to send crafted messages to the device,
potentially resulting in Denial-of-Service.
Published: 2024-10-25T17:04:36.334Z
Updated: 2024-10-25T20:14:03.121Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-10386 |
vulnerable | 2026-06-08 06:23:46.399631 |
Rockwell Automation FactoryTalk ThinManager Authentication Vulnerability
CRITICAL (9.8)
CVE-2024-10386 IMPACT
An authentication
vulnerability exists in the affected product. The vulnerability could allow a
threat actor with network access to send crafted messages to the device, potentially
resulting in database manipulation.
Published: 2024-10-25T17:04:34.000Z
Updated: 2024-10-25T20:17:55.566Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.