FactoryTalk ThinManager vulnerabilities

3 known vulnerabilities in FactoryTalk ThinManager from Rockwell Automation. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  FactoryTalk ThinManager: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2026-11917Jul 14, 2026Rockwell Automation

  A path traversal security issue exists within Rockwell Automation ThinManager® software due to improper limitation of file save operations within the API. An authenticated attacker could exploit this vulnerability to write arbitrary files to restricted system

• 7.5 High severity

  FactoryTalk ThinManager: Out-of-bounds Read

  CVE-2024-10387Oct 25, 2024Rockwell AutomationEPSS 7.98%

  CVE-2024-10387 IMPACT A Denial-of-Service vulnerability exists in the affected product. The vulnerability could allow a threat actor with network access to send crafted messages to the device, potentially resulting in Denial-of-Service.

• 9.8 Critical severity

  FactoryTalk ThinManager: Missing Authentication for Critical Functionality

  CVE-2024-10386Oct 25, 2024Rockwell AutomationEPSS 19.3%

  CVE-2024-10386 IMPACT An authentication vulnerability exists in the affected product. The vulnerability could allow a threat actor with network access to send crafted messages to the device, potentially resulting in database manipulation.