VYPR
← All advisories
High severity7.5NVD Advisory· Published Jun 25, 2024· Updated Jun 17, 2026

CVE-2024-5990

CVE-2024-5990

Description

Due to an improper input validation, an unauthenticated threat actor can send a malicious message to a monitor thread within Rockwell Automation ThinServer™ and cause a denial-of-service condition on the affected device.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Rockwellautomation/Thinmanager2 versions
    cpe:2.3:a:rockwellautomation:thinmanager:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:rockwellautomation:thinmanager:*:*:*:*:*:*:*:*range: >=11.1.0,<11.1.8
    • (no CPE)range: 11.1.0
  • Rockwellautomation/ThinServer2 versions
    cpe:2.3:a:rockwellautomation:thinserver:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:rockwellautomation:thinserver:*:*:*:*:*:*:*:*range: >=11.1.0,<11.1.8
    • (no CPE)

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.