Approved changes feed: RSS · Atom

cpe:2.3:a:rockwellautomation:thinmanager:13.0.0:*:*:*:*:*:*:*

part: a version: 13.0.0 update: *

VendorRockwellautomation (483fb14e-bfe0-5dc5-b460-aca202063cba)
ProductThinmanager (bf0d695b-1c42-563b-a699-fa75614cac56)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-5990 vulnerable 2026-06-08 06:58:17.116043 ThinManager® ThinServer™ Improper Input Validation Vulnerability
Due to an improper input validation, an unauthenticated threat actor can send a malicious message to a monitor thread within Rockwell Automation ThinServer™ and cause a denial-of-service condition on the affected device.
Published: 2024-06-25T16:11:01.407Z
Updated: 2025-08-27T20:42:59.671Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-5989 vulnerable 2026-06-08 06:58:17.113880 Rockwell Automation ThinManager® ThinServer™ Improper Input Validation Vulnerability
Due to an improper input validation, an unauthenticated threat actor can send a malicious message to invoke SQL injection into the program and cause a remote code execution condition on the Rockwell Automation ThinManager® ThinServer™.
Published: 2024-06-25T16:01:39.103Z
Updated: 2025-08-27T20:42:59.534Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-5988 vulnerable 2026-06-08 06:58:17.106133 Rockwell Automation ThinManager® ThinServer™ Improper Input Validation Vulnerability
Due to an improper input validation, an unauthenticated threat actor can send a malicious message to invoke a local or remote executable and cause a remote code execution condition on the Rockwell Automation ThinManager® ThinServer™.
Published: 2024-06-25T15:53:33.899Z
Updated: 2025-08-27T20:42:59.382Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-27857 vulnerable 2026-06-08 05:57:42.325647 Rockwell Automation ThinManager ThinServer Heap-Based Buffer Overflow
HIGH (7.5)
In affected versions, a heap-based buffer over-read condition occurs when the message field indicates more data than is present in the message field in Rockwell Automation's ThinManager ThinServer.  An unauthenticated remote attacker can exploit this vulnerability to crash ThinServer.exe due to a read access violation.
Published: 2023-03-22T00:00:18.344Z
Updated: 2024-10-21T16:02:48.552Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-27856 vulnerable 2026-06-08 05:57:42.325133 Rockwell Automation ThinManager ThinServer Path Traversal Download
HIGH (7.5)
In affected versions, path traversal exists when processing a message of type 8 in Rockwell Automation's ThinManager ThinServer. An unauthenticated remote attacker can exploit this vulnerability to download arbitrary files on the disk drive where ThinServer.exe is installed.
Published: 2023-03-21T23:55:23.665Z
Updated: 2025-02-25T21:22:03.982Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-27855 vulnerable 2026-06-08 05:57:42.323728 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.