Rockwell

In affected versions, path traversal exists when processing a message of type 8 in Rockwell Automation's ThinManager ThinServer.

Rockwell Automation ThinManager ThinServer versions 11.0.0 - 13.0.0 is vulnerable to a heap-based buffer overflow.

CVE-2024-10386 IMPACT An authentication vulnerability exists in the affected product.

In affected versions, a path traversal exists when processing a message in Rockwell Automation's ThinManager ThinServer.

In affected versions, a heap-based buffer over-read condition occurs when the message field indicates more data than is present in the message field in Rockwell Automation's ThinManager ThinServer.

CVE-2024-10387 IMPACT A Denial-of-Service vulnerability exists in the affected product.

CVE-2024-45826 IMPACT Due to improper input validation, a path traversal and remote code execution vulnerability exists when the ThinManager® processes a crafted POST request.

Due to an improper input validation, an unauthenticated threat actor can send a malicious message to invoke SQL injection into the program and cause a remote code execution condition on the Rockwell Automation ThinManage…

Due to an improper input validation, an unauthenticated threat actor can send a malicious message to invoke a local or remote executable and cause a remote code execution condition on the Rockwell Automation ThinManager®…

Due to an improper input validation, an unauthenticated threat actor can send a malicious message to a monitor thread within Rockwell Automation ThinServer™ and cause a denial-of-service condition on the affected device.

A server-side request forgery security issue exists within Rockwell Automation ThinManager® software due to the lack of input sanitization.

An executable used in Rockwell Automation ThinManager ThinServer can be configured to enable an API feature in the HTTPS Server Settings.

A denial-of-service vulnerability exists in the Rockwell Automation ThinManager.

Rockwell Automation ThinManager product allows the use of medium strength ciphers.

A privilege escalation vulnerability exists in the Rockwell Automation ThinManager.

A vulnerability exists in the Rockwell Automation ThinManager® ThinServer that allows a threat actor to disclose sensitive information.