Unrated severityNVD Advisory· Published Sep 9, 2025· Updated Sep 9, 2025
Rockwell Automation ThinManager® Server-Side Request Forgery Vulnerability
CVE-2025-9065
Description
A server-side request forgery security issue exists within Rockwell Automation ThinManager® software due to the lack of input sanitization. Authenticated attackers can exploit this vulnerability by specifying external SMB paths, exposing the ThinServer® service account NTLM hash.
Affected products
2- Rockwell Automation/ThinManagerv5Range: 13.0 - 14.0
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1News mentions
0No linked articles in our index yet.