← Database

CVE-2024-7988

CRITICAL CVSS: 9.8 Published: 2024-08-26 Modified: 2026-06-17

Description

A remote code execution vulnerability exists in the Rockwell Automation ThinManager® ThinServer™ that allows a threat actor to execute arbitrary code with System privileges. This vulnerability exists due to the lack of proper data input validation, which allows files to be overwritten.

Affected Platforms

Rockwellautomation Thinmanager Thinserver

Weakness Type

CWE-20

References