CVE-2024-5989
June 25, 2024, 6:50 p.m.
Tags
Product(s) Impacted
Rockwell Automation ThinManager ThinServer
Description
Due to an improper input validation, an unauthenticated threat actor can send a malicious message to invoke SQL injection into the program and cause a remote code execution condition on the Rockwell Automation ThinManager® ThinServer™.
Weaknesses
CWE-20
Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
CWE ID: 20Date
Published: June 25, 2024, 4:15 p.m.
Last Modified: June 25, 2024, 6:50 p.m.
Status : Awaiting Analysis
CVE has been recently published to the CVE List and has been received by the NVD.
More infoSource
PSIRT@rockwellautomation.com
References
https://www.rockwellautomation.com/
PSIRT@rockwellautomation.com