| Package | Affected versions | Patched versions |
|---|---|---|
| thinmanager | ≥ 13.0.0, ≤ 14.0.0 |
A server-side request forgery security issue exists within Rockwell Automation ThinManager® software due to the lack of input sanitization. Authenticated attackers can exploit this vulnerability by specifying external SMB paths, exposing the ThinServer® service account NTLM hash.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free