CVE-2024-5988 (GCVE-0-2024-5988)
Vulnerability from cvelistv5 – Published: 2024-06-25 15:53 – Updated: 2025-08-27 20:42
VLAI
Title
Rockwell Automation ThinManager® ThinServer™ Improper Input Validation Vulnerability
Summary
Due to an improper input validation, an unauthenticated threat actor can send a malicious message to invoke a local or remote executable and cause a remote code execution condition on the Rockwell Automation ThinManager® ThinServer™.
Severity
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
- CWE-20 - Improper Input Validation
Assigner
References
1 reference
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Rockwell Automation | ThinManager® ThinServer™ |
Affected:
11.1.0
Affected: 11.2.0 Affected: 12.0.0 Affected: 12.1.0 Affected: 13.0.0 Affected: 13.1.0 Affected: 13.2.0 |
|
| rockwellautomation | thinmanager |
Affected:
11.1.0 , < 11.1.8
(custom)
Affected: 11.2.0 , < 11.2.9 (custom) Affected: 12.0.0 , < 12.0.7 (custom) Affected: 12.1.0 , < 12.1.8 (custom) Affected: 13.0.0 , < 13.0.4 (custom) Affected: 13.1.0 , < 13.1.2 (custom) Affected: 13.2.0 , < 13.2.2 (custom) cpe:2.3:a:rockwellautomation:thinmanager:11.1.0:*:*:*:*:*:*:* cpe:2.3:a:rockwellautomation:thinmanager:11.2.0:*:*:*:*:*:*:* cpe:2.3:a:rockwellautomation:thinmanager:12.0.0:*:*:*:*:*:*:* cpe:2.3:a:rockwellautomation:thinmanager:12.1.0:*:*:*:*:*:*:* cpe:2.3:a:rockwellautomation:thinmanager:13.0.0:*:*:*:*:*:*:* cpe:2.3:a:rockwellautomation:thinmanager:13.1.0:*:*:*:*:*:*:* cpe:2.3:a:rockwellautomation:thinmanager:13.2.0:*:*:*:*:*:*:* |
Date Public
2024-06-25 13:00
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:rockwellautomation:thinmanager:11.1.0:*:*:*:*:*:*:*",
"cpe:2.3:a:rockwellautomation:thinmanager:11.2.0:*:*:*:*:*:*:*",
"cpe:2.3:a:rockwellautomation:thinmanager:12.0.0:*:*:*:*:*:*:*",
"cpe:2.3:a:rockwellautomation:thinmanager:12.1.0:*:*:*:*:*:*:*",
"cpe:2.3:a:rockwellautomation:thinmanager:13.0.0:*:*:*:*:*:*:*",
"cpe:2.3:a:rockwellautomation:thinmanager:13.1.0:*:*:*:*:*:*:*",
"cpe:2.3:a:rockwellautomation:thinmanager:13.2.0:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "thinmanager",
"vendor": "rockwellautomation",
"versions": [
{
"lessThan": "11.1.8",
"status": "affected",
"version": "11.1.0",
"versionType": "custom"
},
{
"lessThan": "11.2.9",
"status": "affected",
"version": "11.2.0",
"versionType": "custom"
},
{
"lessThan": "12.0.7",
"status": "affected",
"version": "12.0.0",
"versionType": "custom"
},
{
"lessThan": "12.1.8",
"status": "affected",
"version": "12.1.0",
"versionType": "custom"
},
{
"lessThan": "13.0.4",
"status": "affected",
"version": "13.0.0",
"versionType": "custom"
},
{
"lessThan": "13.1.2",
"status": "affected",
"version": "13.1.0",
"versionType": "custom"
},
{
"lessThan": "13.2.2",
"status": "affected",
"version": "13.2.0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:rockwellautomation:thinmanager:11.1.0:*:*:*:*:*:*:*",
"cpe:2.3:a:rockwellautomation:thinmanager:11.2.0:*:*:*:*:*:*:*",
"cpe:2.3:a:rockwellautomation:thinmanager:12.0.0:*:*:*:*:*:*:*",
"cpe:2.3:a:rockwellautomation:thinmanager:12.1.0:*:*:*:*:*:*:*",
"cpe:2.3:a:rockwellautomation:thinmanager:13.0.0:*:*:*:*:*:*:*",
"cpe:2.3:a:rockwellautomation:thinmanager:13.1.0:*:*:*:*:*:*:*",
"cpe:2.3:a:rockwellautomation:thinmanager:13.2.0:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "thinmanager",
"vendor": "rockwellautomation",
"versions": [
{
"lessThan": "11.1.8",
"status": "affected",
"version": "11.1.0",
"versionType": "custom"
},
{
"lessThan": "11.2.9",
"status": "affected",
"version": "11.2.0",
"versionType": "custom"
},
{
"lessThan": "12.0.7",
"status": "affected",
"version": "12.0.0",
"versionType": "custom"
},
{
"lessThan": "12.1.8",
"status": "affected",
"version": "12.1.0",
"versionType": "custom"
},
{
"lessThan": "13.0.4",
"status": "affected",
"version": "13.0.0",
"versionType": "custom"
},
{
"lessThan": "13.1.2",
"status": "affected",
"version": "13.1.0",
"versionType": "custom"
},
{
"lessThan": "13.2.2",
"status": "affected",
"version": "13.2.0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:rockwellautomation:thinmanager:11.1.0:*:*:*:*:*:*:*",
"cpe:2.3:a:rockwellautomation:thinmanager:11.2.0:*:*:*:*:*:*:*",
"cpe:2.3:a:rockwellautomation:thinmanager:12.0.0:*:*:*:*:*:*:*",
"cpe:2.3:a:rockwellautomation:thinmanager:12.1.0:*:*:*:*:*:*:*",
"cpe:2.3:a:rockwellautomation:thinmanager:13.0.0:*:*:*:*:*:*:*",
"cpe:2.3:a:rockwellautomation:thinmanager:13.1.0:*:*:*:*:*:*:*",
"cpe:2.3:a:rockwellautomation:thinmanager:13.2.0:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "thinmanager",
"vendor": "rockwellautomation",
"versions": [
{
"lessThan": "11.1.8",
"status": "affected",
"version": "11.1.0",
"versionType": "custom"
},
{
"lessThan": "11.2.9",
"status": "affected",
"version": "11.2.0",
"versionType": "custom"
},
{
"lessThan": "12.0.7",
"status": "affected",
"version": "12.0.0",
"versionType": "custom"
},
{
"lessThan": "12.1.8",
"status": "affected",
"version": "12.1.0",
"versionType": "custom"
},
{
"lessThan": "13.0.4",
"status": "affected",
"version": "13.0.0",
"versionType": "custom"
},
{
"lessThan": "13.1.2",
"status": "affected",
"version": "13.1.0",
"versionType": "custom"
},
{
"lessThan": "13.2.2",
"status": "affected",
"version": "13.2.0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:rockwellautomation:thinmanager:11.1.0:*:*:*:*:*:*:*",
"cpe:2.3:a:rockwellautomation:thinmanager:11.2.0:*:*:*:*:*:*:*",
"cpe:2.3:a:rockwellautomation:thinmanager:12.0.0:*:*:*:*:*:*:*",
"cpe:2.3:a:rockwellautomation:thinmanager:12.1.0:*:*:*:*:*:*:*",
"cpe:2.3:a:rockwellautomation:thinmanager:13.0.0:*:*:*:*:*:*:*",
"cpe:2.3:a:rockwellautomation:thinmanager:13.1.0:*:*:*:*:*:*:*",
"cpe:2.3:a:rockwellautomation:thinmanager:13.2.0:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "thinmanager",
"vendor": "rockwellautomation",
"versions": [
{
"lessThan": "11.1.8",
"status": "affected",
"version": "11.1.0",
"versionType": "custom"
},
{
"lessThan": "11.2.9",
"status": "affected",
"version": "11.2.0",
"versionType": "custom"
},
{
"lessThan": "12.0.7",
"status": "affected",
"version": "12.0.0",
"versionType": "custom"
},
{
"lessThan": "12.1.8",
"status": "affected",
"version": "12.1.0",
"versionType": "custom"
},
{
"lessThan": "13.0.4",
"status": "affected",
"version": "13.0.0",
"versionType": "custom"
},
{
"lessThan": "13.1.2",
"status": "affected",
"version": "13.1.0",
"versionType": "custom"
},
{
"lessThan": "13.2.2",
"status": "affected",
"version": "13.2.0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:rockwellautomation:thinmanager:11.1.0:*:*:*:*:*:*:*",
"cpe:2.3:a:rockwellautomation:thinmanager:11.2.0:*:*:*:*:*:*:*",
"cpe:2.3:a:rockwellautomation:thinmanager:12.0.0:*:*:*:*:*:*:*",
"cpe:2.3:a:rockwellautomation:thinmanager:12.1.0:*:*:*:*:*:*:*",
"cpe:2.3:a:rockwellautomation:thinmanager:13.0.0:*:*:*:*:*:*:*",
"cpe:2.3:a:rockwellautomation:thinmanager:13.1.0:*:*:*:*:*:*:*",
"cpe:2.3:a:rockwellautomation:thinmanager:13.2.0:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "thinmanager",
"vendor": "rockwellautomation",
"versions": [
{
"lessThan": "11.1.8",
"status": "affected",
"version": "11.1.0",
"versionType": "custom"
},
{
"lessThan": "11.2.9",
"status": "affected",
"version": "11.2.0",
"versionType": "custom"
},
{
"lessThan": "12.0.7",
"status": "affected",
"version": "12.0.0",
"versionType": "custom"
},
{
"lessThan": "12.1.8",
"status": "affected",
"version": "12.1.0",
"versionType": "custom"
},
{
"lessThan": "13.0.4",
"status": "affected",
"version": "13.0.0",
"versionType": "custom"
},
{
"lessThan": "13.1.2",
"status": "affected",
"version": "13.1.0",
"versionType": "custom"
},
{
"lessThan": "13.2.2",
"status": "affected",
"version": "13.2.0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:rockwellautomation:thinmanager:11.1.0:*:*:*:*:*:*:*",
"cpe:2.3:a:rockwellautomation:thinmanager:11.2.0:*:*:*:*:*:*:*",
"cpe:2.3:a:rockwellautomation:thinmanager:12.0.0:*:*:*:*:*:*:*",
"cpe:2.3:a:rockwellautomation:thinmanager:12.1.0:*:*:*:*:*:*:*",
"cpe:2.3:a:rockwellautomation:thinmanager:13.0.0:*:*:*:*:*:*:*",
"cpe:2.3:a:rockwellautomation:thinmanager:13.1.0:*:*:*:*:*:*:*",
"cpe:2.3:a:rockwellautomation:thinmanager:13.2.0:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "thinmanager",
"vendor": "rockwellautomation",
"versions": [
{
"lessThan": "11.1.8",
"status": "affected",
"version": "11.1.0",
"versionType": "custom"
},
{
"lessThan": "11.2.9",
"status": "affected",
"version": "11.2.0",
"versionType": "custom"
},
{
"lessThan": "12.0.7",
"status": "affected",
"version": "12.0.0",
"versionType": "custom"
},
{
"lessThan": "12.1.8",
"status": "affected",
"version": "12.1.0",
"versionType": "custom"
},
{
"lessThan": "13.0.4",
"status": "affected",
"version": "13.0.0",
"versionType": "custom"
},
{
"lessThan": "13.1.2",
"status": "affected",
"version": "13.1.0",
"versionType": "custom"
},
{
"lessThan": "13.2.2",
"status": "affected",
"version": "13.2.0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:rockwellautomation:thinmanager:11.1.0:*:*:*:*:*:*:*",
"cpe:2.3:a:rockwellautomation:thinmanager:11.2.0:*:*:*:*:*:*:*",
"cpe:2.3:a:rockwellautomation:thinmanager:12.0.0:*:*:*:*:*:*:*",
"cpe:2.3:a:rockwellautomation:thinmanager:12.1.0:*:*:*:*:*:*:*",
"cpe:2.3:a:rockwellautomation:thinmanager:13.0.0:*:*:*:*:*:*:*",
"cpe:2.3:a:rockwellautomation:thinmanager:13.1.0:*:*:*:*:*:*:*",
"cpe:2.3:a:rockwellautomation:thinmanager:13.2.0:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "thinmanager",
"vendor": "rockwellautomation",
"versions": [
{
"lessThan": "11.1.8",
"status": "affected",
"version": "11.1.0",
"versionType": "custom"
},
{
"lessThan": "11.2.9",
"status": "affected",
"version": "11.2.0",
"versionType": "custom"
},
{
"lessThan": "12.0.7",
"status": "affected",
"version": "12.0.0",
"versionType": "custom"
},
{
"lessThan": "12.1.8",
"status": "affected",
"version": "12.1.0",
"versionType": "custom"
},
{
"lessThan": "13.0.4",
"status": "affected",
"version": "13.0.0",
"versionType": "custom"
},
{
"lessThan": "13.1.2",
"status": "affected",
"version": "13.1.0",
"versionType": "custom"
},
{
"lessThan": "13.2.2",
"status": "affected",
"version": "13.2.0",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-5988",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-06-26T13:49:49.088552Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-08-27T20:42:59.382Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"providerMetadata": {
"dateUpdated": "2024-08-01T21:25:03.324Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_transferred"
],
"url": "https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1677.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "ThinManager\u00ae ThinServer\u2122",
"vendor": "Rockwell Automation",
"versions": [
{
"status": "affected",
"version": "11.1.0"
},
{
"status": "affected",
"version": "11.2.0"
},
{
"status": "affected",
"version": "12.0.0"
},
{
"status": "affected",
"version": "12.1.0"
},
{
"status": "affected",
"version": "13.0.0"
},
{
"status": "affected",
"version": "13.1.0"
},
{
"status": "affected",
"version": "13.2.0"
}
]
}
],
"datePublic": "2024-06-25T13:00:00.000Z",
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eDue to an improper input validation, an unauthenticated threat actor can send a malicious message to invoke a local or remote executable and cause a remote code execution condition on the Rockwell Automation\u0026nbsp;\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eThinManager\u00ae ThinServer\u2122.\u003c/span\u003e\u003c/span\u003e"
}
],
"value": "Due to an improper input validation, an unauthenticated threat actor can send a malicious message to invoke a local or remote executable and cause a remote code execution condition on the Rockwell Automation\u00a0ThinManager\u00ae ThinServer\u2122."
}
],
"impacts": [
{
"capecId": "CAPEC-153",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-153 Input Data Manipulation"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 9.3,
"baseSeverity": "CRITICAL",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-20",
"description": "CWE-20 Improper Input Validation",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-06-25T16:03:05.556Z",
"orgId": "b73dd486-f505-4403-b634-40b078b177f0",
"shortName": "Rockwell"
},
"references": [
{
"url": "https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1677.html"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003ctable\u003e\u003ctbody\u003e\u003ctr\u003e\u003ctd\u003e\u003cp\u003eAffected Product\u003c/p\u003e\u003c/td\u003e\u003ctd\u003e\u003cp\u003eCVE\u003c/p\u003e\u003c/td\u003e\u003ctd\u003e\u003cp\u003eFirst Known in software version\u003c/p\u003e\u003c/td\u003e\u003ctd\u003e\u003cp\u003eCorrected in software version (\u003cb\u003e\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://thinmanager.com/downloads/index.php\"\u003eAvailable Here\u003c/a\u003e\u003c/b\u003e)\u003c/p\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd rowspan=\"2\"\u003e\u003cp\u003e\u003cb\u003eThinManager\u00ae ThinServer\u2122\u003c/b\u003e\u003c/p\u003e\u003c/td\u003e\u003ctd\u003e\u003cp\u003e2024-5988\u003c/p\u003e\u003cp\u003e2024-5989\u003c/p\u003e\u003cp\u003e\u0026nbsp;\u003c/p\u003e\u003cp\u003e\u0026nbsp;\u003c/p\u003e\u003cp\u003e\u0026nbsp;\u003c/p\u003e\u003cp\u003e\u0026nbsp;\u003c/p\u003e\u003cp\u003e\u0026nbsp;\u003c/p\u003e\u003c/td\u003e\u003ctd\u003e\u003cp\u003e11.1.0\u003c/p\u003e\u003cp\u003e11.2.0\u003c/p\u003e\u003cp\u003e12.0.0\u003c/p\u003e\u003cp\u003e12.1.0\u003c/p\u003e\u003cp\u003e13.0.0\u003c/p\u003e\u003cp\u003e13.1.0\u003c/p\u003e\u003cp\u003e13.2.0\u003c/p\u003e\u003c/td\u003e\u003ctd\u003e\u003cp\u003e\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://thinmanager.com/downloads/index.php\"\u003e11.1.8\u003c/a\u003e\u003c/p\u003e\u003cp\u003e\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://thinmanager.com/downloads/index.php\"\u003e11.2.9\u003c/a\u003e\u003c/p\u003e\u003cp\u003e\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://thinmanager.com/downloads/index.php\"\u003e12.0.7\u003c/a\u003e\u003c/p\u003e\u003cp\u003e\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://thinmanager.com/downloads/index.php\"\u003e12.1.8\u003c/a\u003e\u003c/p\u003e\u003cp\u003e\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://thinmanager.com/downloads/index.php\"\u003e13.0.5\u003c/a\u003e\u003c/p\u003e\u003cp\u003e\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://thinmanager.com/downloads/index.php\"\u003e13.1.3\u003c/a\u003e\u003c/p\u003e\u003cp\u003e\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://thinmanager.com/downloads/index.php\"\u003e13.2.2\u003c/a\u003e\u003c/p\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003e\u003cp\u003e2024-5990\u003c/p\u003e\u003c/td\u003e\u003ctd\u003e\u003cp\u003e11.1.0\u003c/p\u003e\u003cp\u003e11.2.0\u003c/p\u003e\u003cp\u003e12.0.0\u003c/p\u003e\u003cp\u003e12.1.0\u003c/p\u003e\u003cp\u003e13.0.0\u003c/p\u003e\u003cp\u003e13.1.0\u003c/p\u003e\u003c/td\u003e\u003ctd\u003e\u003cp\u003e\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://thinmanager.com/downloads/index.php\"\u003e11.1.8\u003c/a\u003e\u003c/p\u003e\u003cp\u003e\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://thinmanager.com/downloads/index.php\"\u003e11.2.9\u003c/a\u003e\u003c/p\u003e\u003cp\u003e\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://thinmanager.com/downloads/index.php\"\u003e12.0.7\u003c/a\u003e\u003c/p\u003e\u003cp\u003e\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://thinmanager.com/downloads/index.php\"\u003e12.1.8\u003c/a\u003e\u003c/p\u003e\u003cp\u003e\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://thinmanager.com/downloads/index.php\"\u003e13.0.4\u003c/a\u003e\u003c/p\u003e\u003cp\u003e\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://thinmanager.com/downloads/index.php\"\u003e13.1.2\u003c/a\u003e\u003c/p\u003e\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e\n\n\u003cbr\u003e\n\n\u003cp\u003eCustomers using the affected software are encouraged to apply the risk mitigations from the list below, if possible. Additionally, we encourage customers to implement our suggested security best practices to minimize the potential risk of vulnerability.\u003c/p\u003e\u003cp\u003e\u00b7 Update to the corrected software versions via the \u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://thinmanager.com/downloads/index.php\"\u003eThinManager\u00ae Downloads Site\u003c/a\u003e\u003c/p\u003e\u003cp\u003e\u00b7 Limit remote access for TCP Port 2031 to known thin clients and ThinManager\u00ae servers.\u003c/p\u003e\u003cp\u003e\u00b7 Security\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1085012/loc/en_US#__highlight\"\u003e\u0026nbsp;Best Practices\u003c/a\u003e\u003c/p\u003e\u003cp\u003e\u003cb\u003e\u0026nbsp;\u003c/b\u003e\u003c/p\u003e\n\n\u003cbr\u003e"
}
],
"value": "Affected Product\n\nCVE\n\nFirst Known in software version\n\nCorrected in software version ( Available Here https://thinmanager.com/downloads/index.php )\n\nThinManager\u00ae ThinServer\u2122\n\n2024-5988\n\n2024-5989\n\n\u00a0\n\n\u00a0\n\n\u00a0\n\n\u00a0\n\n\u00a0\n\n11.1.0\n\n11.2.0\n\n12.0.0\n\n12.1.0\n\n13.0.0\n\n13.1.0\n\n13.2.0\n\n 11.1.8 https://thinmanager.com/downloads/index.php \n\n 11.2.9 https://thinmanager.com/downloads/index.php \n\n 12.0.7 https://thinmanager.com/downloads/index.php \n\n 12.1.8 https://thinmanager.com/downloads/index.php \n\n 13.0.5 https://thinmanager.com/downloads/index.php \n\n 13.1.3 https://thinmanager.com/downloads/index.php \n\n 13.2.2 https://thinmanager.com/downloads/index.php \n\n2024-5990\n\n11.1.0\n\n11.2.0\n\n12.0.0\n\n12.1.0\n\n13.0.0\n\n13.1.0\n\n 11.1.8 https://thinmanager.com/downloads/index.php \n\n 11.2.9 https://thinmanager.com/downloads/index.php \n\n 12.0.7 https://thinmanager.com/downloads/index.php \n\n 12.1.8 https://thinmanager.com/downloads/index.php \n\n 13.0.4 https://thinmanager.com/downloads/index.php \n\n 13.1.2 https://thinmanager.com/downloads/index.php \n\n\n\n\n\n\nCustomers using the affected software are encouraged to apply the risk mitigations from the list below, if possible. Additionally, we encourage customers to implement our suggested security best practices to minimize the potential risk of vulnerability.\n\n\u00b7 Update to the corrected software versions via the ThinManager\u00ae Downloads Site https://thinmanager.com/downloads/index.php \n\n\u00b7 Limit remote access for TCP Port 2031 to known thin clients and ThinManager\u00ae servers.\n\n\u00b7 Security \u00a0Best Practices https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1085012/loc/en_US#__highlight"
}
],
"source": {
"discovery": "EXTERNAL"
},
"title": "Rockwell Automation ThinManager\u00ae ThinServer\u2122 Improper Input Validation Vulnerability",
"x_generator": {
"engine": "Vulnogram 0.2.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "b73dd486-f505-4403-b634-40b078b177f0",
"assignerShortName": "Rockwell",
"cveId": "CVE-2024-5988",
"datePublished": "2024-06-25T15:53:33.899Z",
"dateReserved": "2024-06-13T20:56:08.636Z",
"dateUpdated": "2025-08-27T20:42:59.382Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2024-5988",
"date": "2026-07-01",
"epss": "0.02654",
"percentile": "0.83792"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2024-5988\",\"sourceIdentifier\":\"PSIRT@rockwellautomation.com\",\"published\":\"2024-06-25T16:15:24.937\",\"lastModified\":\"2026-06-17T08:17:02.857\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Due to an improper input validation, an unauthenticated threat actor can send a malicious message to invoke a local or remote executable and cause a remote code execution condition on the Rockwell Automation\u00a0ThinManager\u00ae ThinServer\u2122.\"},{\"lang\":\"es\",\"value\":\"Debido a una validaci\u00f3n de entrada incorrecta, un actor de amenazas no autenticado puede enviar un mensaje malicioso para invocar un ejecutable local o remoto y provocar una condici\u00f3n de ejecuci\u00f3n remota de c\u00f3digo en el ThinManager\u00ae ThinServer\u2122 de Rockwell Automation.\"}],\"affected\":[{\"source\":\"PSIRT@rockwellautomation.com\",\"affectedData\":[{\"vendor\":\"Rockwell Automation\",\"product\":\"ThinManager\u00ae ThinServer\u2122\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"11.1.0\",\"status\":\"affected\"},{\"version\":\"11.2.0\",\"status\":\"affected\"},{\"version\":\"12.0.0\",\"status\":\"affected\"},{\"version\":\"12.1.0\",\"status\":\"affected\"},{\"version\":\"13.0.0\",\"status\":\"affected\"},{\"version\":\"13.1.0\",\"status\":\"affected\"},{\"version\":\"13.2.0\",\"status\":\"affected\"}]}]},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"affectedData\":[{\"vendor\":\"rockwellautomation\",\"product\":\"thinmanager\",\"defaultStatus\":\"unknown\",\"cpes\":[\"cpe:2.3:a:rockwellautomation:thinmanager:11.1.0:*:*:*:*:*:*:*\",\"cpe:2.3:a:rockwellautomation:thinmanager:11.2.0:*:*:*:*:*:*:*\",\"cpe:2.3:a:rockwellautomation:thinmanager:12.0.0:*:*:*:*:*:*:*\",\"cpe:2.3:a:rockwellautomation:thinmanager:12.1.0:*:*:*:*:*:*:*\",\"cpe:2.3:a:rockwellautomation:thinmanager:13.0.0:*:*:*:*:*:*:*\",\"cpe:2.3:a:rockwellautomation:thinmanager:13.1.0:*:*:*:*:*:*:*\",\"cpe:2.3:a:rockwellautomation:thinmanager:13.2.0:*:*:*:*:*:*:*\"],\"versions\":[{\"version\":\"11.1.0\",\"lessThan\":\"11.1.8\",\"versionType\":\"custom\",\"status\":\"affected\"},{\"version\":\"11.2.0\",\"lessThan\":\"11.2.9\",\"versionType\":\"custom\",\"status\":\"affected\"},{\"version\":\"12.0.0\",\"lessThan\":\"12.0.7\",\"versionType\":\"custom\",\"status\":\"affected\"},{\"version\":\"12.1.0\",\"lessThan\":\"12.1.8\",\"versionType\":\"custom\",\"status\":\"affected\"},{\"version\":\"13.0.0\",\"lessThan\":\"13.0.4\",\"versionType\":\"custom\",\"status\":\"affected\"},{\"version\":\"13.1.0\",\"lessThan\":\"13.1.2\",\"versionType\":\"custom\",\"status\":\"affected\"},{\"version\":\"13.2.0\",\"lessThan\":\"13.2.2\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"rockwellautomation\",\"product\":\"thinmanager\",\"defaultStatus\":\"unknown\",\"cpes\":[\"cpe:2.3:a:rockwellautomation:thinmanager:11.1.0:*:*:*:*:*:*:*\",\"cpe:2.3:a:rockwellautomation:thinmanager:11.2.0:*:*:*:*:*:*:*\",\"cpe:2.3:a:rockwellautomation:thinmanager:12.0.0:*:*:*:*:*:*:*\",\"cpe:2.3:a:rockwellautomation:thinmanager:12.1.0:*:*:*:*:*:*:*\",\"cpe:2.3:a:rockwellautomation:thinmanager:13.0.0:*:*:*:*:*:*:*\",\"cpe:2.3:a:rockwellautomation:thinmanager:13.1.0:*:*:*:*:*:*:*\",\"cpe:2.3:a:rockwellautomation:thinmanager:13.2.0:*:*:*:*:*:*:*\"],\"versions\":[{\"version\":\"11.1.0\",\"lessThan\":\"11.1.8\",\"versionType\":\"custom\",\"status\":\"affected\"},{\"version\":\"11.2.0\",\"lessThan\":\"11.2.9\",\"versionType\":\"custom\",\"status\":\"affected\"},{\"version\":\"12.0.0\",\"lessThan\":\"12.0.7\",\"versionType\":\"custom\",\"status\":\"affected\"},{\"version\":\"12.1.0\",\"lessThan\":\"12.1.8\",\"versionType\":\"custom\",\"status\":\"affected\"},{\"version\":\"13.0.0\",\"lessThan\":\"13.0.4\",\"versionType\":\"custom\",\"status\":\"affected\"},{\"version\":\"13.1.0\",\"lessThan\":\"13.1.2\",\"versionType\":\"custom\",\"status\":\"affected\"},{\"version\":\"13.2.0\",\"lessThan\":\"13.2.2\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"rockwellautomation\",\"product\":\"thinmanager\",\"defaultStatus\":\"unknown\",\"cpes\":[\"cpe:2.3:a:rockwellautomation:thinmanager:11.1.0:*:*:*:*:*:*:*\",\"cpe:2.3:a:rockwellautomation:thinmanager:11.2.0:*:*:*:*:*:*:*\",\"cpe:2.3:a:rockwellautomation:thinmanager:12.0.0:*:*:*:*:*:*:*\",\"cpe:2.3:a:rockwellautomation:thinmanager:12.1.0:*:*:*:*:*:*:*\",\"cpe:2.3:a:rockwellautomation:thinmanager:13.0.0:*:*:*:*:*:*:*\",\"cpe:2.3:a:rockwellautomation:thinmanager:13.1.0:*:*:*:*:*:*:*\",\"cpe:2.3:a:rockwellautomation:thinmanager:13.2.0:*:*:*:*:*:*:*\"],\"versions\":[{\"version\":\"11.1.0\",\"lessThan\":\"11.1.8\",\"versionType\":\"custom\",\"status\":\"affected\"},{\"version\":\"11.2.0\",\"lessThan\":\"11.2.9\",\"versionType\":\"custom\",\"status\":\"affected\"},{\"version\":\"12.0.0\",\"lessThan\":\"12.0.7\",\"versionType\":\"custom\",\"status\":\"affected\"},{\"version\":\"12.1.0\",\"lessThan\":\"12.1.8\",\"versionType\":\"custom\",\"status\":\"affected\"},{\"version\":\"13.0.0\",\"lessThan\":\"13.0.4\",\"versionType\":\"custom\",\"status\":\"affected\"},{\"version\":\"13.1.0\",\"lessThan\":\"13.1.2\",\"versionType\":\"custom\",\"status\":\"affected\"},{\"version\":\"13.2.0\",\"lessThan\":\"13.2.2\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"rockwellautomation\",\"product\":\"thinmanager\",\"defaultStatus\":\"unknown\",\"cpes\":[\"cpe:2.3:a:rockwellautomation:thinmanager:11.1.0:*:*:*:*:*:*:*\",\"cpe:2.3:a:rockwellautomation:thinmanager:11.2.0:*:*:*:*:*:*:*\",\"cpe:2.3:a:rockwellautomation:thinmanager:12.0.0:*:*:*:*:*:*:*\",\"cpe:2.3:a:rockwellautomation:thinmanager:12.1.0:*:*:*:*:*:*:*\",\"cpe:2.3:a:rockwellautomation:thinmanager:13.0.0:*:*:*:*:*:*:*\",\"cpe:2.3:a:rockwellautomation:thinmanager:13.1.0:*:*:*:*:*:*:*\",\"cpe:2.3:a:rockwellautomation:thinmanager:13.2.0:*:*:*:*:*:*:*\"],\"versions\":[{\"version\":\"11.1.0\",\"lessThan\":\"11.1.8\",\"versionType\":\"custom\",\"status\":\"affected\"},{\"version\":\"11.2.0\",\"lessThan\":\"11.2.9\",\"versionType\":\"custom\",\"status\":\"affected\"},{\"version\":\"12.0.0\",\"lessThan\":\"12.0.7\",\"versionType\":\"custom\",\"status\":\"affected\"},{\"version\":\"12.1.0\",\"lessThan\":\"12.1.8\",\"versionType\":\"custom\",\"status\":\"affected\"},{\"version\":\"13.0.0\",\"lessThan\":\"13.0.4\",\"versionType\":\"custom\",\"status\":\"affected\"},{\"version\":\"13.1.0\",\"lessThan\":\"13.1.2\",\"versionType\":\"custom\",\"status\":\"affected\"},{\"version\":\"13.2.0\",\"lessThan\":\"13.2.2\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"rockwellautomation\",\"product\":\"thinmanager\",\"defaultStatus\":\"unknown\",\"cpes\":[\"cpe:2.3:a:rockwellautomation:thinmanager:11.1.0:*:*:*:*:*:*:*\",\"cpe:2.3:a:rockwellautomation:thinmanager:11.2.0:*:*:*:*:*:*:*\",\"cpe:2.3:a:rockwellautomation:thinmanager:12.0.0:*:*:*:*:*:*:*\",\"cpe:2.3:a:rockwellautomation:thinmanager:12.1.0:*:*:*:*:*:*:*\",\"cpe:2.3:a:rockwellautomation:thinmanager:13.0.0:*:*:*:*:*:*:*\",\"cpe:2.3:a:rockwellautomation:thinmanager:13.1.0:*:*:*:*:*:*:*\",\"cpe:2.3:a:rockwellautomation:thinmanager:13.2.0:*:*:*:*:*:*:*\"],\"versions\":[{\"version\":\"11.1.0\",\"lessThan\":\"11.1.8\",\"versionType\":\"custom\",\"status\":\"affected\"},{\"version\":\"11.2.0\",\"lessThan\":\"11.2.9\",\"versionType\":\"custom\",\"status\":\"affected\"},{\"version\":\"12.0.0\",\"lessThan\":\"12.0.7\",\"versionType\":\"custom\",\"status\":\"affected\"},{\"version\":\"12.1.0\",\"lessThan\":\"12.1.8\",\"versionType\":\"custom\",\"status\":\"affected\"},{\"version\":\"13.0.0\",\"lessThan\":\"13.0.4\",\"versionType\":\"custom\",\"status\":\"affected\"},{\"version\":\"13.1.0\",\"lessThan\":\"13.1.2\",\"versionType\":\"custom\",\"status\":\"affected\"},{\"version\":\"13.2.0\",\"lessThan\":\"13.2.2\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"rockwellautomation\",\"product\":\"thinmanager\",\"defaultStatus\":\"unknown\",\"cpes\":[\"cpe:2.3:a:rockwellautomation:thinmanager:11.1.0:*:*:*:*:*:*:*\",\"cpe:2.3:a:rockwellautomation:thinmanager:11.2.0:*:*:*:*:*:*:*\",\"cpe:2.3:a:rockwellautomation:thinmanager:12.0.0:*:*:*:*:*:*:*\",\"cpe:2.3:a:rockwellautomation:thinmanager:12.1.0:*:*:*:*:*:*:*\",\"cpe:2.3:a:rockwellautomation:thinmanager:13.0.0:*:*:*:*:*:*:*\",\"cpe:2.3:a:rockwellautomation:thinmanager:13.1.0:*:*:*:*:*:*:*\",\"cpe:2.3:a:rockwellautomation:thinmanager:13.2.0:*:*:*:*:*:*:*\"],\"versions\":[{\"version\":\"11.1.0\",\"lessThan\":\"11.1.8\",\"versionType\":\"custom\",\"status\":\"affected\"},{\"version\":\"11.2.0\",\"lessThan\":\"11.2.9\",\"versionType\":\"custom\",\"status\":\"affected\"},{\"version\":\"12.0.0\",\"lessThan\":\"12.0.7\",\"versionType\":\"custom\",\"status\":\"affected\"},{\"version\":\"12.1.0\",\"lessThan\":\"12.1.8\",\"versionType\":\"custom\",\"status\":\"affected\"},{\"version\":\"13.0.0\",\"lessThan\":\"13.0.4\",\"versionType\":\"custom\",\"status\":\"affected\"},{\"version\":\"13.1.0\",\"lessThan\":\"13.1.2\",\"versionType\":\"custom\",\"status\":\"affected\"},{\"version\":\"13.2.0\",\"lessThan\":\"13.2.2\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"rockwellautomation\",\"product\":\"thinmanager\",\"defaultStatus\":\"unknown\",\"cpes\":[\"cpe:2.3:a:rockwellautomation:thinmanager:11.1.0:*:*:*:*:*:*:*\",\"cpe:2.3:a:rockwellautomation:thinmanager:11.2.0:*:*:*:*:*:*:*\",\"cpe:2.3:a:rockwellautomation:thinmanager:12.0.0:*:*:*:*:*:*:*\",\"cpe:2.3:a:rockwellautomation:thinmanager:12.1.0:*:*:*:*:*:*:*\",\"cpe:2.3:a:rockwellautomation:thinmanager:13.0.0:*:*:*:*:*:*:*\",\"cpe:2.3:a:rockwellautomation:thinmanager:13.1.0:*:*:*:*:*:*:*\",\"cpe:2.3:a:rockwellautomation:thinmanager:13.2.0:*:*:*:*:*:*:*\"],\"versions\":[{\"version\":\"11.1.0\",\"lessThan\":\"11.1.8\",\"versionType\":\"custom\",\"status\":\"affected\"},{\"version\":\"11.2.0\",\"lessThan\":\"11.2.9\",\"versionType\":\"custom\",\"status\":\"affected\"},{\"version\":\"12.0.0\",\"lessThan\":\"12.0.7\",\"versionType\":\"custom\",\"status\":\"affected\"},{\"version\":\"12.1.0\",\"lessThan\":\"12.1.8\",\"versionType\":\"custom\",\"status\":\"affected\"},{\"version\":\"13.0.0\",\"lessThan\":\"13.0.4\",\"versionType\":\"custom\",\"status\":\"affected\"},{\"version\":\"13.1.0\",\"lessThan\":\"13.1.2\",\"versionType\":\"custom\",\"status\":\"affected\"},{\"version\":\"13.2.0\",\"lessThan\":\"13.2.2\",\"versionType\":\"custom\",\"status\":\"affected\"}]}]}],\"metrics\":{\"cvssMetricV40\":[{\"source\":\"PSIRT@rockwellautomation.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"4.0\",\"vectorString\":\"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X\",\"baseScore\":9.3,\"baseSeverity\":\"CRITICAL\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"attackRequirements\":\"NONE\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"vulnConfidentialityImpact\":\"HIGH\",\"vulnIntegrityImpact\":\"HIGH\",\"vulnAvailabilityImpact\":\"HIGH\",\"subConfidentialityImpact\":\"NONE\",\"subIntegrityImpact\":\"NONE\",\"subAvailabilityImpact\":\"NONE\",\"exploitMaturity\":\"NOT_DEFINED\",\"confidentialityRequirement\":\"NOT_DEFINED\",\"integrityRequirement\":\"NOT_DEFINED\",\"availabilityRequirement\":\"NOT_DEFINED\",\"modifiedAttackVector\":\"NOT_DEFINED\",\"modifiedAttackComplexity\":\"NOT_DEFINED\",\"modifiedAttackRequirements\":\"NOT_DEFINED\",\"modifiedPrivilegesRequired\":\"NOT_DEFINED\",\"modifiedUserInteraction\":\"NOT_DEFINED\",\"modifiedVulnConfidentialityImpact\":\"NOT_DEFINED\",\"modifiedVulnIntegrityImpact\":\"NOT_DEFINED\",\"modifiedVulnAvailabilityImpact\":\"NOT_DEFINED\",\"modifiedSubConfidentialityImpact\":\"NOT_DEFINED\",\"modifiedSubIntegrityImpact\":\"NOT_DEFINED\",\"modifiedSubAvailabilityImpact\":\"NOT_DEFINED\",\"Safety\":\"NOT_DEFINED\",\"Automatable\":\"NOT_DEFINED\",\"Recovery\":\"NOT_DEFINED\",\"valueDensity\":\"NOT_DEFINED\",\"vulnerabilityResponseEffort\":\"NOT_DEFINED\",\"providerUrgency\":\"NOT_DEFINED\"}}],\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":9.8,\"baseSeverity\":\"CRITICAL\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":5.9}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2024-06-26T13:49:49.088552Z\",\"id\":\"CVE-2024-5988\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"yes\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"PSIRT@rockwellautomation.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-20\"}]},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-noinfo\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rockwellautomation:thinmanager:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"11.1.0\",\"versionEndExcluding\":\"11.1.8\",\"matchCriteriaId\":\"2BC59B57-F8F5-4979-826B-EAA0A8456B2A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rockwellautomation:thinmanager:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"11.2.0\",\"versionEndExcluding\":\"11.2.9\",\"matchCriteriaId\":\"79481998-C98B-4486-A2DC-C4DE324DCA10\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rockwellautomation:thinmanager:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"12.0.0\",\"versionEndExcluding\":\"12.0.7\",\"matchCriteriaId\":\"BFD553E2-EB04-4D97-AD70-2175933E3DCD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rockwellautomation:thinmanager:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"12.1.0\",\"versionEndExcluding\":\"12.1.8\",\"matchCriteriaId\":\"FC5BBCD2-0C47-4B48-81DD-D56D5677BFA0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rockwellautomation:thinmanager:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"13.0.0\",\"versionEndExcluding\":\"13.0.5\",\"matchCriteriaId\":\"7EEDB253-45FB-4722-994A-E0EF00C7F405\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rockwellautomation:thinmanager:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"13.1.0\",\"versionEndExcluding\":\"13.1.3\",\"matchCriteriaId\":\"F2FB9C58-1AAF-46CB-BBB5-909223EE5572\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rockwellautomation:thinmanager:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"13.2.0\",\"versionEndExcluding\":\"13.2.2\",\"matchCriteriaId\":\"BB3AA59A-9CA4-4CD0-981C-B974A94BAC30\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rockwellautomation:thinserver:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"11.1.0\",\"versionEndExcluding\":\"11.1.8\",\"matchCriteriaId\":\"33A7D7B2-945B-48AD-AD65-C1DDD52811DC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rockwellautomation:thinserver:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"11.2.0\",\"versionEndExcluding\":\"11.2.9\",\"matchCriteriaId\":\"808EDF9D-E721-4513-8AC9-A7B86163F0AE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rockwellautomation:thinserver:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"12.0.0\",\"versionEndExcluding\":\"12.0.7\",\"matchCriteriaId\":\"9D00E4B0-2B55-460B-B394-BE0E379144FA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rockwellautomation:thinserver:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"12.1.0\",\"versionEndExcluding\":\"12.1.8\",\"matchCriteriaId\":\"9D2E6604-AED5-4099-B2EB-E33F15095C6A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rockwellautomation:thinserver:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"13.0.0\",\"versionEndExcluding\":\"13.0.5\",\"matchCriteriaId\":\"7229242B-0780-4E55-9088-7FCA82C24FE0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rockwellautomation:thinserver:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"13.1.0\",\"versionEndExcluding\":\"13.1.3\",\"matchCriteriaId\":\"BA376CA1-C47D-45C2-B906-8CCCDF5B83D5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rockwellautomation:thinserver:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"13.2.0\",\"versionEndExcluding\":\"13.2.2\",\"matchCriteriaId\":\"12658E67-3F63-451F-95AC-3191F2043014\"}]}]}],\"references\":[{\"url\":\"https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1677.html\",\"source\":\"PSIRT@rockwellautomation.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1677.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]}]}}",
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1677.html\", \"tags\": [\"x_transferred\"]}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2024-08-01T21:25:03.324Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2024-5988\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-06-26T13:49:49.088552Z\"}}}], \"affected\": [{\"cpes\": [\"cpe:2.3:a:rockwellautomation:thinmanager:11.1.0:*:*:*:*:*:*:*\", \"cpe:2.3:a:rockwellautomation:thinmanager:11.2.0:*:*:*:*:*:*:*\", \"cpe:2.3:a:rockwellautomation:thinmanager:12.0.0:*:*:*:*:*:*:*\", \"cpe:2.3:a:rockwellautomation:thinmanager:12.1.0:*:*:*:*:*:*:*\", \"cpe:2.3:a:rockwellautomation:thinmanager:13.0.0:*:*:*:*:*:*:*\", \"cpe:2.3:a:rockwellautomation:thinmanager:13.1.0:*:*:*:*:*:*:*\", \"cpe:2.3:a:rockwellautomation:thinmanager:13.2.0:*:*:*:*:*:*:*\"], \"vendor\": \"rockwellautomation\", \"product\": \"thinmanager\", \"versions\": [{\"status\": \"affected\", \"version\": \"11.1.0\", \"lessThan\": \"11.1.8\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"version\": \"11.2.0\", \"lessThan\": \"11.2.9\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"version\": \"12.0.0\", \"lessThan\": \"12.0.7\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"version\": \"12.1.0\", \"lessThan\": \"12.1.8\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"version\": \"13.0.0\", \"lessThan\": \"13.0.4\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"version\": \"13.1.0\", \"lessThan\": \"13.1.2\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"version\": \"13.2.0\", \"lessThan\": \"13.2.2\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:2.3:a:rockwellautomation:thinmanager:11.1.0:*:*:*:*:*:*:*\", \"cpe:2.3:a:rockwellautomation:thinmanager:11.2.0:*:*:*:*:*:*:*\", \"cpe:2.3:a:rockwellautomation:thinmanager:12.0.0:*:*:*:*:*:*:*\", \"cpe:2.3:a:rockwellautomation:thinmanager:12.1.0:*:*:*:*:*:*:*\", \"cpe:2.3:a:rockwellautomation:thinmanager:13.0.0:*:*:*:*:*:*:*\", \"cpe:2.3:a:rockwellautomation:thinmanager:13.1.0:*:*:*:*:*:*:*\", \"cpe:2.3:a:rockwellautomation:thinmanager:13.2.0:*:*:*:*:*:*:*\"], \"vendor\": \"rockwellautomation\", \"product\": \"thinmanager\", \"versions\": [{\"status\": \"affected\", \"version\": \"11.1.0\", \"lessThan\": \"11.1.8\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"version\": \"11.2.0\", \"lessThan\": \"11.2.9\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"version\": \"12.0.0\", \"lessThan\": \"12.0.7\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"version\": \"12.1.0\", \"lessThan\": \"12.1.8\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"version\": \"13.0.0\", \"lessThan\": \"13.0.4\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"version\": \"13.1.0\", \"lessThan\": \"13.1.2\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"version\": \"13.2.0\", \"lessThan\": \"13.2.2\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:2.3:a:rockwellautomation:thinmanager:11.1.0:*:*:*:*:*:*:*\", \"cpe:2.3:a:rockwellautomation:thinmanager:11.2.0:*:*:*:*:*:*:*\", \"cpe:2.3:a:rockwellautomation:thinmanager:12.0.0:*:*:*:*:*:*:*\", \"cpe:2.3:a:rockwellautomation:thinmanager:12.1.0:*:*:*:*:*:*:*\", \"cpe:2.3:a:rockwellautomation:thinmanager:13.0.0:*:*:*:*:*:*:*\", \"cpe:2.3:a:rockwellautomation:thinmanager:13.1.0:*:*:*:*:*:*:*\", \"cpe:2.3:a:rockwellautomation:thinmanager:13.2.0:*:*:*:*:*:*:*\"], \"vendor\": \"rockwellautomation\", \"product\": \"thinmanager\", \"versions\": [{\"status\": \"affected\", \"version\": \"11.1.0\", \"lessThan\": \"11.1.8\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"version\": \"11.2.0\", \"lessThan\": \"11.2.9\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"version\": \"12.0.0\", \"lessThan\": \"12.0.7\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"version\": \"12.1.0\", \"lessThan\": \"12.1.8\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"version\": \"13.0.0\", \"lessThan\": \"13.0.4\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"version\": \"13.1.0\", \"lessThan\": \"13.1.2\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"version\": \"13.2.0\", \"lessThan\": \"13.2.2\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:2.3:a:rockwellautomation:thinmanager:11.1.0:*:*:*:*:*:*:*\", \"cpe:2.3:a:rockwellautomation:thinmanager:11.2.0:*:*:*:*:*:*:*\", \"cpe:2.3:a:rockwellautomation:thinmanager:12.0.0:*:*:*:*:*:*:*\", \"cpe:2.3:a:rockwellautomation:thinmanager:12.1.0:*:*:*:*:*:*:*\", \"cpe:2.3:a:rockwellautomation:thinmanager:13.0.0:*:*:*:*:*:*:*\", \"cpe:2.3:a:rockwellautomation:thinmanager:13.1.0:*:*:*:*:*:*:*\", \"cpe:2.3:a:rockwellautomation:thinmanager:13.2.0:*:*:*:*:*:*:*\"], \"vendor\": \"rockwellautomation\", \"product\": \"thinmanager\", \"versions\": [{\"status\": \"affected\", \"version\": \"11.1.0\", \"lessThan\": \"11.1.8\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"version\": \"11.2.0\", \"lessThan\": \"11.2.9\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"version\": \"12.0.0\", \"lessThan\": \"12.0.7\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"version\": \"12.1.0\", \"lessThan\": \"12.1.8\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"version\": \"13.0.0\", \"lessThan\": \"13.0.4\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"version\": \"13.1.0\", \"lessThan\": \"13.1.2\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"version\": \"13.2.0\", \"lessThan\": \"13.2.2\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:2.3:a:rockwellautomation:thinmanager:11.1.0:*:*:*:*:*:*:*\", \"cpe:2.3:a:rockwellautomation:thinmanager:11.2.0:*:*:*:*:*:*:*\", \"cpe:2.3:a:rockwellautomation:thinmanager:12.0.0:*:*:*:*:*:*:*\", \"cpe:2.3:a:rockwellautomation:thinmanager:12.1.0:*:*:*:*:*:*:*\", \"cpe:2.3:a:rockwellautomation:thinmanager:13.0.0:*:*:*:*:*:*:*\", \"cpe:2.3:a:rockwellautomation:thinmanager:13.1.0:*:*:*:*:*:*:*\", \"cpe:2.3:a:rockwellautomation:thinmanager:13.2.0:*:*:*:*:*:*:*\"], \"vendor\": \"rockwellautomation\", \"product\": \"thinmanager\", \"versions\": [{\"status\": \"affected\", \"version\": \"11.1.0\", \"lessThan\": \"11.1.8\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"version\": \"11.2.0\", \"lessThan\": \"11.2.9\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"version\": \"12.0.0\", \"lessThan\": \"12.0.7\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"version\": \"12.1.0\", \"lessThan\": \"12.1.8\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"version\": \"13.0.0\", \"lessThan\": \"13.0.4\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"version\": \"13.1.0\", \"lessThan\": \"13.1.2\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"version\": \"13.2.0\", \"lessThan\": \"13.2.2\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:2.3:a:rockwellautomation:thinmanager:11.1.0:*:*:*:*:*:*:*\", \"cpe:2.3:a:rockwellautomation:thinmanager:11.2.0:*:*:*:*:*:*:*\", \"cpe:2.3:a:rockwellautomation:thinmanager:12.0.0:*:*:*:*:*:*:*\", \"cpe:2.3:a:rockwellautomation:thinmanager:12.1.0:*:*:*:*:*:*:*\", \"cpe:2.3:a:rockwellautomation:thinmanager:13.0.0:*:*:*:*:*:*:*\", \"cpe:2.3:a:rockwellautomation:thinmanager:13.1.0:*:*:*:*:*:*:*\", \"cpe:2.3:a:rockwellautomation:thinmanager:13.2.0:*:*:*:*:*:*:*\"], \"vendor\": \"rockwellautomation\", \"product\": \"thinmanager\", \"versions\": [{\"status\": \"affected\", \"version\": \"11.1.0\", \"lessThan\": \"11.1.8\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"version\": \"11.2.0\", \"lessThan\": \"11.2.9\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"version\": \"12.0.0\", \"lessThan\": \"12.0.7\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"version\": \"12.1.0\", \"lessThan\": \"12.1.8\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"version\": \"13.0.0\", \"lessThan\": \"13.0.4\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"version\": \"13.1.0\", \"lessThan\": \"13.1.2\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"version\": \"13.2.0\", \"lessThan\": \"13.2.2\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:2.3:a:rockwellautomation:thinmanager:11.1.0:*:*:*:*:*:*:*\", \"cpe:2.3:a:rockwellautomation:thinmanager:11.2.0:*:*:*:*:*:*:*\", \"cpe:2.3:a:rockwellautomation:thinmanager:12.0.0:*:*:*:*:*:*:*\", \"cpe:2.3:a:rockwellautomation:thinmanager:12.1.0:*:*:*:*:*:*:*\", \"cpe:2.3:a:rockwellautomation:thinmanager:13.0.0:*:*:*:*:*:*:*\", \"cpe:2.3:a:rockwellautomation:thinmanager:13.1.0:*:*:*:*:*:*:*\", \"cpe:2.3:a:rockwellautomation:thinmanager:13.2.0:*:*:*:*:*:*:*\"], \"vendor\": \"rockwellautomation\", \"product\": \"thinmanager\", \"versions\": [{\"status\": \"affected\", \"version\": \"11.1.0\", \"lessThan\": \"11.1.8\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"version\": \"11.2.0\", \"lessThan\": \"11.2.9\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"version\": \"12.0.0\", \"lessThan\": \"12.0.7\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"version\": \"12.1.0\", \"lessThan\": \"12.1.8\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"version\": \"13.0.0\", \"lessThan\": \"13.0.4\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"version\": \"13.1.0\", \"lessThan\": \"13.1.2\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"version\": \"13.2.0\", \"lessThan\": \"13.2.2\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-06-26T17:05:18.174Z\"}}], \"cna\": {\"title\": \"Rockwell Automation ThinManager\\u00ae ThinServer\\u2122 Improper Input Validation Vulnerability\", \"source\": {\"discovery\": \"EXTERNAL\"}, \"impacts\": [{\"capecId\": \"CAPEC-153\", \"descriptions\": [{\"lang\": \"en\", \"value\": \"CAPEC-153 Input Data Manipulation\"}]}], \"metrics\": [{\"format\": \"CVSS\", \"cvssV4_0\": {\"Safety\": \"NOT_DEFINED\", \"version\": \"4.0\", \"Recovery\": \"NOT_DEFINED\", \"baseScore\": 9.3, \"Automatable\": \"NOT_DEFINED\", \"attackVector\": \"NETWORK\", \"baseSeverity\": \"CRITICAL\", \"valueDensity\": \"NOT_DEFINED\", \"vectorString\": \"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N\", \"providerUrgency\": \"NOT_DEFINED\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"attackRequirements\": \"NONE\", \"privilegesRequired\": \"NONE\", \"subIntegrityImpact\": \"NONE\", \"vulnIntegrityImpact\": \"HIGH\", \"subAvailabilityImpact\": \"NONE\", \"vulnAvailabilityImpact\": \"HIGH\", \"subConfidentialityImpact\": \"NONE\", \"vulnConfidentialityImpact\": \"HIGH\", \"vulnerabilityResponseEffort\": \"NOT_DEFINED\"}, \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL\"}]}], \"affected\": [{\"vendor\": \"Rockwell Automation\", \"product\": \"ThinManager\\u00ae ThinServer\\u2122\", \"versions\": [{\"status\": \"affected\", \"version\": \"11.1.0\"}, {\"status\": \"affected\", \"version\": \"11.2.0\"}, {\"status\": \"affected\", \"version\": \"12.0.0\"}, {\"status\": \"affected\", \"version\": \"12.1.0\"}, {\"status\": \"affected\", \"version\": \"13.0.0\"}, {\"status\": \"affected\", \"version\": \"13.1.0\"}, {\"status\": \"affected\", \"version\": \"13.2.0\"}], \"defaultStatus\": \"unaffected\"}], \"solutions\": [{\"lang\": \"en\", \"value\": \"Affected Product\\n\\nCVE\\n\\nFirst Known in software version\\n\\nCorrected in software version ( Available Here https://thinmanager.com/downloads/index.php )\\n\\nThinManager\\u00ae ThinServer\\u2122\\n\\n2024-5988\\n\\n2024-5989\\n\\n\\u00a0\\n\\n\\u00a0\\n\\n\\u00a0\\n\\n\\u00a0\\n\\n\\u00a0\\n\\n11.1.0\\n\\n11.2.0\\n\\n12.0.0\\n\\n12.1.0\\n\\n13.0.0\\n\\n13.1.0\\n\\n13.2.0\\n\\n 11.1.8 https://thinmanager.com/downloads/index.php \\n\\n 11.2.9 https://thinmanager.com/downloads/index.php \\n\\n 12.0.7 https://thinmanager.com/downloads/index.php \\n\\n 12.1.8 https://thinmanager.com/downloads/index.php \\n\\n 13.0.5 https://thinmanager.com/downloads/index.php \\n\\n 13.1.3 https://thinmanager.com/downloads/index.php \\n\\n 13.2.2 https://thinmanager.com/downloads/index.php \\n\\n2024-5990\\n\\n11.1.0\\n\\n11.2.0\\n\\n12.0.0\\n\\n12.1.0\\n\\n13.0.0\\n\\n13.1.0\\n\\n 11.1.8 https://thinmanager.com/downloads/index.php \\n\\n 11.2.9 https://thinmanager.com/downloads/index.php \\n\\n 12.0.7 https://thinmanager.com/downloads/index.php \\n\\n 12.1.8 https://thinmanager.com/downloads/index.php \\n\\n 13.0.4 https://thinmanager.com/downloads/index.php \\n\\n 13.1.2 https://thinmanager.com/downloads/index.php \\n\\n\\n\\n\\n\\n\\nCustomers using the affected software are encouraged to apply the risk mitigations from the list below, if possible. Additionally, we encourage customers to implement our suggested security best practices to minimize the potential risk of vulnerability.\\n\\n\\u00b7 Update to the corrected software versions via the ThinManager\\u00ae Downloads Site https://thinmanager.com/downloads/index.php \\n\\n\\u00b7 Limit remote access for TCP Port 2031 to known thin clients and ThinManager\\u00ae servers.\\n\\n\\u00b7 Security \\u00a0Best Practices https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1085012/loc/en_US#__highlight\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"\u003ctable\u003e\u003ctbody\u003e\u003ctr\u003e\u003ctd\u003e\u003cp\u003eAffected Product\u003c/p\u003e\u003c/td\u003e\u003ctd\u003e\u003cp\u003eCVE\u003c/p\u003e\u003c/td\u003e\u003ctd\u003e\u003cp\u003eFirst Known in software version\u003c/p\u003e\u003c/td\u003e\u003ctd\u003e\u003cp\u003eCorrected in software version (\u003cb\u003e\u003ca target=\\\"_blank\\\" rel=\\\"nofollow\\\" href=\\\"https://thinmanager.com/downloads/index.php\\\"\u003eAvailable Here\u003c/a\u003e\u003c/b\u003e)\u003c/p\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd rowspan=\\\"2\\\"\u003e\u003cp\u003e\u003cb\u003eThinManager\\u00ae ThinServer\\u2122\u003c/b\u003e\u003c/p\u003e\u003c/td\u003e\u003ctd\u003e\u003cp\u003e2024-5988\u003c/p\u003e\u003cp\u003e2024-5989\u003c/p\u003e\u003cp\u003e\u0026nbsp;\u003c/p\u003e\u003cp\u003e\u0026nbsp;\u003c/p\u003e\u003cp\u003e\u0026nbsp;\u003c/p\u003e\u003cp\u003e\u0026nbsp;\u003c/p\u003e\u003cp\u003e\u0026nbsp;\u003c/p\u003e\u003c/td\u003e\u003ctd\u003e\u003cp\u003e11.1.0\u003c/p\u003e\u003cp\u003e11.2.0\u003c/p\u003e\u003cp\u003e12.0.0\u003c/p\u003e\u003cp\u003e12.1.0\u003c/p\u003e\u003cp\u003e13.0.0\u003c/p\u003e\u003cp\u003e13.1.0\u003c/p\u003e\u003cp\u003e13.2.0\u003c/p\u003e\u003c/td\u003e\u003ctd\u003e\u003cp\u003e\u003ca target=\\\"_blank\\\" rel=\\\"nofollow\\\" href=\\\"https://thinmanager.com/downloads/index.php\\\"\u003e11.1.8\u003c/a\u003e\u003c/p\u003e\u003cp\u003e\u003ca target=\\\"_blank\\\" rel=\\\"nofollow\\\" href=\\\"https://thinmanager.com/downloads/index.php\\\"\u003e11.2.9\u003c/a\u003e\u003c/p\u003e\u003cp\u003e\u003ca target=\\\"_blank\\\" rel=\\\"nofollow\\\" href=\\\"https://thinmanager.com/downloads/index.php\\\"\u003e12.0.7\u003c/a\u003e\u003c/p\u003e\u003cp\u003e\u003ca target=\\\"_blank\\\" rel=\\\"nofollow\\\" href=\\\"https://thinmanager.com/downloads/index.php\\\"\u003e12.1.8\u003c/a\u003e\u003c/p\u003e\u003cp\u003e\u003ca target=\\\"_blank\\\" rel=\\\"nofollow\\\" href=\\\"https://thinmanager.com/downloads/index.php\\\"\u003e13.0.5\u003c/a\u003e\u003c/p\u003e\u003cp\u003e\u003ca target=\\\"_blank\\\" rel=\\\"nofollow\\\" href=\\\"https://thinmanager.com/downloads/index.php\\\"\u003e13.1.3\u003c/a\u003e\u003c/p\u003e\u003cp\u003e\u003ca target=\\\"_blank\\\" rel=\\\"nofollow\\\" href=\\\"https://thinmanager.com/downloads/index.php\\\"\u003e13.2.2\u003c/a\u003e\u003c/p\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003e\u003cp\u003e2024-5990\u003c/p\u003e\u003c/td\u003e\u003ctd\u003e\u003cp\u003e11.1.0\u003c/p\u003e\u003cp\u003e11.2.0\u003c/p\u003e\u003cp\u003e12.0.0\u003c/p\u003e\u003cp\u003e12.1.0\u003c/p\u003e\u003cp\u003e13.0.0\u003c/p\u003e\u003cp\u003e13.1.0\u003c/p\u003e\u003c/td\u003e\u003ctd\u003e\u003cp\u003e\u003ca target=\\\"_blank\\\" rel=\\\"nofollow\\\" href=\\\"https://thinmanager.com/downloads/index.php\\\"\u003e11.1.8\u003c/a\u003e\u003c/p\u003e\u003cp\u003e\u003ca target=\\\"_blank\\\" rel=\\\"nofollow\\\" href=\\\"https://thinmanager.com/downloads/index.php\\\"\u003e11.2.9\u003c/a\u003e\u003c/p\u003e\u003cp\u003e\u003ca target=\\\"_blank\\\" rel=\\\"nofollow\\\" href=\\\"https://thinmanager.com/downloads/index.php\\\"\u003e12.0.7\u003c/a\u003e\u003c/p\u003e\u003cp\u003e\u003ca target=\\\"_blank\\\" rel=\\\"nofollow\\\" href=\\\"https://thinmanager.com/downloads/index.php\\\"\u003e12.1.8\u003c/a\u003e\u003c/p\u003e\u003cp\u003e\u003ca target=\\\"_blank\\\" rel=\\\"nofollow\\\" href=\\\"https://thinmanager.com/downloads/index.php\\\"\u003e13.0.4\u003c/a\u003e\u003c/p\u003e\u003cp\u003e\u003ca target=\\\"_blank\\\" rel=\\\"nofollow\\\" href=\\\"https://thinmanager.com/downloads/index.php\\\"\u003e13.1.2\u003c/a\u003e\u003c/p\u003e\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e\\n\\n\u003cbr\u003e\\n\\n\u003cp\u003eCustomers using the affected software are encouraged to apply the risk mitigations from the list below, if possible. Additionally, we encourage customers to implement our suggested security best practices to minimize the potential risk of vulnerability.\u003c/p\u003e\u003cp\u003e\\u00b7 Update to the corrected software versions via the \u003ca target=\\\"_blank\\\" rel=\\\"nofollow\\\" href=\\\"https://thinmanager.com/downloads/index.php\\\"\u003eThinManager\\u00ae Downloads Site\u003c/a\u003e\u003c/p\u003e\u003cp\u003e\\u00b7 Limit remote access for TCP Port 2031 to known thin clients and ThinManager\\u00ae servers.\u003c/p\u003e\u003cp\u003e\\u00b7 Security\u003ca target=\\\"_blank\\\" rel=\\\"nofollow\\\" href=\\\"https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1085012/loc/en_US#__highlight\\\"\u003e\u0026nbsp;Best Practices\u003c/a\u003e\u003c/p\u003e\u003cp\u003e\u003cb\u003e\u0026nbsp;\u003c/b\u003e\u003c/p\u003e\\n\\n\u003cbr\u003e\", \"base64\": false}]}], \"datePublic\": \"2024-06-25T13:00:00.000Z\", \"references\": [{\"url\": \"https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1677.html\"}], \"x_generator\": {\"engine\": \"Vulnogram 0.2.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"Due to an improper input validation, an unauthenticated threat actor can send a malicious message to invoke a local or remote executable and cause a remote code execution condition on the Rockwell Automation\\u00a0ThinManager\\u00ae ThinServer\\u2122.\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"\u003cspan style=\\\"background-color: rgb(255, 255, 255);\\\"\u003eDue to an improper input validation, an unauthenticated threat actor can send a malicious message to invoke a local or remote executable and cause a remote code execution condition on the Rockwell Automation\u0026nbsp;\u003cspan style=\\\"background-color: rgb(255, 255, 255);\\\"\u003eThinManager\\u00ae ThinServer\\u2122.\u003c/span\u003e\u003c/span\u003e\", \"base64\": false}]}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-20\", \"description\": \"CWE-20 Improper Input Validation\"}]}], \"providerMetadata\": {\"orgId\": \"b73dd486-f505-4403-b634-40b078b177f0\", \"shortName\": \"Rockwell\", \"dateUpdated\": \"2024-06-25T16:03:05.556Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2024-5988\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2025-08-27T20:42:59.382Z\", \"dateReserved\": \"2024-06-13T20:56:08.636Z\", \"assignerOrgId\": \"b73dd486-f505-4403-b634-40b078b177f0\", \"datePublished\": \"2024-06-25T15:53:33.899Z\", \"assignerShortName\": \"Rockwell\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
}
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…