Awaiting Analysis
CVE has been marked for Analysis. Normally once in this state the CVE will be analyzed by NVD staff within 24 hours.
CVE has been marked for Analysis. Normally once in this state the CVE will be analyzed by NVD staff within 24 hours.
Products
Rockwell Automation ThinManager ThinServer
Source
PSIRT@rockwellautomation.com
Tags
CVE-2024-7987 details
Published : Aug. 26, 2024, 3:15 p.m.
Last Modified : Aug. 26, 2024, 6:35 p.m.
Last Modified : Aug. 26, 2024, 6:35 p.m.
Description
A remote code execution vulnerability exists in the Rockwell Automation ThinManager® ThinServer™ that allows a threat actor to execute arbitrary code with System privileges. To exploit this vulnerability and a threat actor must abuse the ThinServer™ service by creating a junction and use it to upload arbitrary files.
CVSS Score
| 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 |
|---|
Weakness
| Weakness | Name | Description |
|---|---|---|
| CWE-434 | Unrestricted Upload of File with Dangerous Type | The product allows the attacker to upload or transfer files of dangerous types that can be automatically processed within the product's environment. |
References
| URL | Source |
|---|---|
| https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1692.html | PSIRT@rockwellautomation.com |
This website uses the NVD API, but is not approved or certified by it.