Thinmanager® Thinserver™
Approved changes feed: RSS · Atom
cpe:2.3:a:rockwell_automation:thinmanager®_thinserver™:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Rockwell Automation (dde15a4c-943a-57fe-888d-2bc03ade6545) |
|---|---|
| Product | Thinmanager® Thinserver™ (62bb8f04-c9d5-5522-94bd-0897b12b928b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-7988 |
vulnerable | 2026-06-08 06:58:24.041795 |
ThinManager® ThinServer™ Information Disclosure and Remote Code Execution Vulnerabilities
A remote code execution vulnerability exists in the Rockwell Automation ThinManager® ThinServer™ that allows a threat actor to execute arbitrary code with System privileges. This vulnerability exists due to the lack of proper data input validation, which allows files to be overwritten.
Published: 2024-08-26T14:47:07.612Z
Updated: 2024-08-26T17:46:47.107Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-7987 |
vulnerable | 2026-06-08 06:58:24.040943 |
Rockwell Automation ThinManager® ThinServer™ Information Disclosure and Remote Code Execution Vulnerabilities
A remote code execution vulnerability exists in the Rockwell Automation ThinManager® ThinServer™
that allows a threat actor to execute arbitrary code with System privileges. To exploit this vulnerability and a threat actor must abuse the ThinServer™ service by creating a junction and use it to upload arbitrary files.
Published: 2024-08-26T14:40:29.255Z
Updated: 2024-08-26T17:29:09.449Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-7986 |
vulnerable | 2026-06-08 06:58:24.039173 |
Rockwell Automation ThinManager® ThinServer™ Information Disclosure
A vulnerability exists in the Rockwell Automation ThinManager® ThinServer that allows a threat actor to disclose sensitive information. A threat actor can exploit this vulnerability by abusing the ThinServer™ service to read arbitrary files by creating a junction that points to the target directory.
Published: 2024-08-23T11:51:55.080Z
Updated: 2024-08-28T16:21:02.832Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-5990 |
vulnerable | 2026-06-08 06:58:17.116359 |
ThinManager® ThinServer™ Improper Input Validation Vulnerability
Due to an improper input validation, an unauthenticated threat actor can send a malicious message to a monitor thread within Rockwell Automation ThinServer™ and cause a denial-of-service condition on the affected device.
Published: 2024-06-25T16:11:01.407Z
Updated: 2025-08-27T20:42:59.671Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-5989 |
vulnerable | 2026-06-08 06:58:17.114136 |
Rockwell Automation ThinManager® ThinServer™ Improper Input Validation Vulnerability
Due to an improper input validation, an unauthenticated threat actor can send a malicious message to invoke SQL injection into the program and cause a remote code execution condition on the Rockwell Automation ThinManager® ThinServer™.
Published: 2024-06-25T16:01:39.103Z
Updated: 2025-08-27T20:42:59.534Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-5988 |
vulnerable | 2026-06-08 06:58:17.109805 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.