← Database

CVE-2024-5988

CRITICAL CVSS: 9.8 Published: 2024-06-25 Modified: 2026-06-17

Description

Due to an improper input validation, an unauthenticated threat actor can send a malicious message to invoke a local or remote executable and cause a remote code execution condition on the Rockwell Automation ThinManager® ThinServer™.

Affected Platforms

Rockwellautomation ThinmanagerRockwellautomation Thinserver

Weakness Type

CWE-20, NVD-CWE-noinfo

References