Rockwellautomation Thinmanager Thinserver vulnerabilities

5 CVEs affecting Rockwellautomation Thinmanager Thinserver, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-7988, published 2024-08-26.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-2915, published 2023-08-17. Critical severity, CVSS 9.1. EPSS: 81.8% chance of exploitation in the next 30 days. The Rockwell Automation Thinmanager Thinserver is impacted by an improper input validation vulnerability, Due to improper input validation, a path traversal vulnerability exists when the ThinManager…
CVE-2023-2917, published 2023-08-17. Critical severity, CVSS 9.8. EPSS: 72.2% chance of exploitation in the next 30 days. The Rockwell Automation Thinmanager Thinserver is impacted by an improper input validation vulnerability. Due to an improper input validation, a path traversal vulnerability exists, via the filename…
CVE-2023-2914, published 2023-08-17. High severity, CVSS 7.5. EPSS: 39.9% chance of exploitation in the next 30 days. The Rockwell Automation Thinmanager Thinserver is impacted by an improper input validation vulnerability, an integer overflow condition exists in the affected products. When the ThinManager processes…
CVE-2024-7988, published 2024-08-26. Critical severity, CVSS 9.8. EPSS: 4.8% chance of exploitation in the next 30 days. A remote code execution vulnerability exists in the Rockwell Automation ThinManager® ThinServer™ that allows a threat actor to execute arbitrary code with System privileges. This vulnerability exists…
CVE-2024-7987, published 2024-08-26. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. A remote code execution vulnerability exists in the Rockwell Automation ThinManager® ThinServer™ that allows a threat actor to execute arbitrary code with System privileges. To exploit this…