CVE-2024-5988: Rockwell Automation ThinManager® ThinServer™ Improper Input Validation Vulnerability

Q: What is the severity of CVE-2024-5988?

CVE-2024-5988 is considered a high severity vulnerability due to its potential for remote code execution.

Q: How do I fix CVE-2024-5988?

To fix CVE-2024-5988, update the Rockwell Automation ThinManager and ThinServer to the latest versions provided by the vendor.

Q: What are the affected versions for CVE-2024-5988?

CVE-2024-5988 affects Rockwell Automation ThinManager and ThinServer versions from 11.1.0 to 13.2.2.

Q: What type of vulnerability is CVE-2024-5988?

CVE-2024-5988 is classified as a remote code execution vulnerability due to improper input validation.

Q: Can CVE-2024-5988 be exploited by an authenticated user?

No, CVE-2024-5988 can be exploited by an unauthenticated threat actor.

Published Jun 25, 2024

Updated

Due to an improper input validation, an unauthenticated threat actor can send a malicious message to invoke a local or remote executable and cause a remote code execution condition on the Rockwell Automation ThinManager® ThinServer™.

Affected Software

14 affected components

rockwellautomation Thinmanager>=11.1.0<11.1.8

rockwellautomation Thinmanager>=11.2.0<11.2.9

rockwellautomation Thinmanager>=12.0.0<12.0.7

rockwellautomation Thinmanager>=12.1.0<12.1.8

rockwellautomation Thinmanager>=13.0.0<13.0.5

rockwellautomation Thinmanager>=13.1.0<13.1.3

rockwellautomation Thinmanager>=13.2.0<13.2.2

rockwellautomation Thinserver>=11.1.0<11.1.8

rockwellautomation Thinserver>=11.2.0<11.2.9

rockwellautomation Thinserver>=12.0.0<12.0.7

rockwellautomation Thinserver>=12.1.0<12.1.8

rockwellautomation Thinserver>=13.0.0<13.0.5

rockwellautomation Thinserver>=13.1.0<13.1.3

rockwellautomation Thinserver>=13.2.0<13.2.2

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Rockwell Automation ThinManager ThinServer to a version that resolves this vulnerability.
Fixed in 11.1.8
Upgrade
Upgrade Rockwell Automation ThinManager ThinServer to a version that resolves this vulnerability.
Fixed in 11.2.9
Upgrade
Upgrade Rockwell Automation ThinManager ThinServer to a version that resolves this vulnerability.
Fixed in 12.0.7
Upgrade
Upgrade Rockwell Automation ThinManager ThinServer to a version that resolves this vulnerability.
Fixed in 12.1.8
Upgrade
Upgrade Rockwell Automation ThinManager ThinServer to a version that resolves this vulnerability.
Fixed in 13.0.5
Upgrade
Upgrade Rockwell Automation ThinManager ThinServer to a version that resolves this vulnerability.
Fixed in 13.1.3
Upgrade
Upgrade Rockwell Automation ThinManager ThinServer to a version that resolves this vulnerability.
Fixed in 13.2.2
Compensating control
Limit remote access for TCP Port 2031 to known thin clients and ThinManager ThinServer (per mitigation list in the provided advisory).

Event History

Jun 25, 2024

CVE Published

via MITRE·03:53 PM

Data Sourced

via MITRE·03:53 PM

RemedyDescriptionWeakness

Data Sourced

via NVD·04:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2024-5988?

CVE-2024-5988 is considered a high severity vulnerability due to its potential for remote code execution.

How do I fix CVE-2024-5988?