VYPR

ThinServer

by Rockwellautomation

CVEs (3)

  • CVE-2024-5989CriJun 25, 2024
    risk 0.64cvss 9.8epss 0.02

    Due to an improper input validation, an unauthenticated threat actor can send a malicious message to invoke SQL injection into the program and cause a remote code execution condition on the Rockwell Automation ThinManager® ThinServer™.

  • CVE-2024-5988CriJun 25, 2024
    risk 0.64cvss 9.8epss 0.03

    Due to an improper input validation, an unauthenticated threat actor can send a malicious message to invoke a local or remote executable and cause a remote code execution condition on the Rockwell Automation ThinManager® ThinServer™.

  • CVE-2024-5990HigJun 25, 2024
    risk 0.49cvss 7.5epss 0.02

    Due to an improper input validation, an unauthenticated threat actor can send a malicious message to a monitor thread within Rockwell Automation ThinServer™ and cause a denial-of-service condition on the affected device.