Rockwell Automation ThinServer™ Vulnerability: Unauthenticated Denial-of-Service Attack
CVE-2024-5990
8.7HIGH
Key Information:
- Vendor
Rockwell Automation
- Status
- Vendor
- CVE Published:
- 25 June 2024
What is CVE-2024-5990?
An improper input validation vulnerability in Rockwell Automation's ThinServer™ permits unauthenticated threat actors to send crafted messages to a monitor thread. This exploitation can result in a denial-of-service condition, rendering the affected device inoperable. Users of ThinServer™ are advised to review the security advisory for mitigation steps.
Affected Version(s)
ThinManager® ThinServer™ 11.1.0
ThinManager® ThinServer™ 11.2.0
ThinManager® ThinServer™ 12.0.0