CVE-2024-7988 in ThinManager ThinServer

Riassunto

di MITRE • 26/08/2024

A remote code execution vulnerability exists in the Rockwell Automation ThinManager® ThinServer™ that allows a threat actor to execute arbitrary code with System privileges. This vulnerability exists due to the lack of proper data input validation, which allows files to be overwritten.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Prenotare: 19/08/2024
• Divulgazione: 26/08/2024
• Moderazione: accettato
• Voce: VDB-275627
• CPE: pronto
• CWE: CWE-434 (confermato)
• CVSS: 9.8 (CNA)
• EPSS: 0.01477
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2024-7988
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2024-7988
• CVE Details: https://www.cvedetails.com/cve/CVE-2024-7988/