CVE-2024-45826: ThinManager® Code Execution Vulnerability
CVE-2024-45826 IMPACT Due to improper input validation, a path traversal and remote code execution vulnerability exists when the ThinManager® processes a crafted POST request. If exploited, a user can install an executable file.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-45826?
CVE-2024-45826 is considered a high-severity vulnerability due to its potential for remote code execution.
How do I fix CVE-2024-45826?
To fix CVE-2024-45826, update your Rockwell Automation ThinManager software to the latest version that is not affected.
What types of attacks can CVE-2024-45826 enable?
CVE-2024-45826 can enable path traversal attacks and remote code execution through crafted POST requests.
Which versions of ThinManager are affected by CVE-2024-45826?
CVE-2024-45826 affects Rockwell Automation ThinManager versions 13.1.0 to 13.1.3 and 13.2.0 to 13.2.2.
What is path traversal in the context of CVE-2024-45826?
Path traversal in CVE-2024-45826 refers to the vulnerability that allows attackers to access files and directories outside the intended path.