CVE-2024-5990CWE-20

ThinManager® ThinServer™ Improper Input Validation Vulnerability

High · published June 25, 2024

CVSS v4.0
8.7
EPSS
2%
Percentile
82.8
In the wild
Unconfirmed
What it is

Due to an improper input validation, an unauthenticated threat actor can send a malicious message to a monitor thread within Rockwell Automation ThinServer™ and cause a denial-of-service condition on the affected device.

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS
0.02254 · 82.8th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2024-06-25T16:11Z
EPSS history
Timeline
  • 25 JUN 16:11Z
    ThinManager® ThinServer™ Improper Input Validation Vulnerability
    cvelistv5