| Package | Affected versions | Patched versions |
|---|---|---|
| thinmanager thinserver | ≥ 11.1.0, < 11.1.8≥ 11.2.0, < 11.2.9≥ 12.0.0, < 12.0.7≥ 12.1.0, < 12.1.8≥ 13.0.0, < 13.0.5≥ 13.1.0, < 13.1.3≥ 13.2.0, < 13.2.2 | 11.1.811.2.912.0.712.1.813.0.513.1.313.2.2 |
A remote code execution vulnerability exists in the Rockwell Automation ThinManager® ThinServer™ that allows a threat actor to execute arbitrary code with System privileges. To exploit this vulnerability and a threat actor must abuse the ThinServer™ service by creating a junction and use it to upload arbitrary files.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free