ThinManager ThinServer vulnerabilities
13 known vulnerabilities in ThinManager ThinServer from Rockwell Automation. 13 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.3 Critical severity
A remote code execution vulnerability exists in the Rockwell Automation ThinManager®…
A remote code execution vulnerability exists in the Rockwell Automation ThinManager® ThinServer™ that allows a threat actor to execute arbitrary code with System privileges. This vulnerability exists due to the lack of proper data input validation, which allow
- 7.8 High severity
ThinManager® ThinServer™: Unrestricted Upload of File with Dangerous Type
A remote code execution vulnerability exists in the Rockwell Automation ThinManager® ThinServer™ that allows a threat actor to execute arbitrary code with System privileges. To exploit this vulnerability and a threat actor must abuse the ThinServer™ service by
- 7.5 High severity
ThinManager® ThinServer™: Incorrect Permission Assignment for Critical Resource
A vulnerability exists in the Rockwell Automation ThinManager® ThinServer that allows a threat actor to disclose sensitive information. A threat actor can exploit this vulnerability by abusing the ThinServer™ service to read arbitrary files by creating a junct
- 7.5 High severity
Due to an improper input validation, an unauthenticated threat actor can send a malicious…
Due to an improper input validation, an unauthenticated threat actor can send a malicious message to a monitor thread within Rockwell Automation ThinServer™ and cause a denial-of-service condition on the affected device.
- 9.8 Critical severity
Due to an improper input validation, an unauthenticated threat actor can send a malicious…
Due to an improper input validation, an unauthenticated threat actor can send a malicious message to invoke SQL injection into the program and cause a remote code execution condition on the Rockwell Automation ThinManager® ThinServer™.
- 9.8 Critical severity
Due to an improper input validation, an unauthenticated threat actor can send a malicious…
Due to an improper input validation, an unauthenticated threat actor can send a malicious message to invoke a local or remote executable and cause a remote code execution condition on the Rockwell Automation ThinManager® ThinServer™.
- 9.8 Critical severity
ThinManager ThinServer: Improper Limitation of a Pathname to a Restricted Directory
The Rockwell Automation Thinmanager Thinserver is impacted by an improper input validation vulnerability. Due to an improper input validation, a path traversal vulnerability exists, via the filename field, when the ThinManager processes a certain function. If
- 9.1 Critical severity
ThinManager ThinServer: Improper Limitation of a Pathname to a Restricted Directory
The Rockwell Automation Thinmanager Thinserver is impacted by an improper input validation vulnerability, Due to improper input validation, a path traversal vulnerability exists when the ThinManager software processes a certain function. If exploited, an unaut
- 7.5 High severity
ThinManager ThinServer: Integer Overflow or Wraparound
The Rockwell Automation Thinmanager Thinserver is impacted by an improper input validation vulnerability, an integer overflow condition exists in the affected products. When the ThinManager processes incoming messages, a read access violation occurs and termin
- 7.5 High severity
ThinManager ThinServer: Out-of-bounds Read
In affected versions, a heap-based buffer over-read condition occurs when the message field indicates more data than is present in the message field in Rockwell Automation's ThinManager ThinServer. An unauthenticated remote attacker can exploit this vulnerabil
- 7.5 High severity
ThinManager ThinServer: Improper Limitation of a Pathname to a Restricted Directory
In affected versions, path traversal exists when processing a message of type 8 in Rockwell Automation's ThinManager ThinServer. An unauthenticated remote attacker can exploit this vulnerability to download arbitrary files on the disk drive where ThinServer.ex
- 9.8 Critical severity
ThinManager ThinServer: Improper Limitation of a Pathname to a Restricted Directory
In affected versions, a path traversal exists when processing a message in Rockwell Automation's ThinManager ThinServer. An unauthenticated remote attacker could potentially exploit this vulnerability to upload arbitrary files to any directory on the disk driv
- 9.8 Critical severity
ThinManager ThinServer: Out-of-bounds Write
Rockwell Automation ThinManager ThinServer versions 11.0.0 - 13.0.0 is vulnerable to a heap-based buffer overflow. An attacker could send a specifically crafted TFTP or HTTPS request, causing a heap-based buffer overflow that crashes the ThinServer process. If