← Database

CVE-2024-5989

CRITICAL CVSS: 9.8 Published: 2024-06-25 Modified: 2026-06-17

Description

Due to an improper input validation, an unauthenticated threat actor can send a malicious message to invoke SQL injection into the program and cause a remote code execution condition on the Rockwell Automation ThinManager® ThinServer™.

Affected Platforms

Rockwellautomation ThinmanagerRockwellautomation Thinserver

Weakness Type

CWE-20, NVD-CWE-noinfo

References