Rockwell Automation ThinManager ThinServer

Risk Summary

Successful exploitation of this vulnerability could lead to the software crashing; a buffer overflow condition may allow remote code execution.

CVEs (1)

Remediations

• Versions 11.0.0 through 11.0.4: Update to Version 11.00.05
• Versions 11.1.0 through 11.1.4: Update to Version 11.01.05
• Versions 11.2.0 through 11.2.5: Update to Version 11.02.06
• Versions 12.0.0 through 12.0.2: Update to Version 12.00.03
• Versions 12.1.0 through 12.1.3: Update to Version 12.01.04
• Version 13.0.0: Update to Version 13.00.01
• Rockwell Automation recommends users unable to update to the patched versions to block network access to the ThinManager TFTP and HTTPS ports from endpoints other than ThinManager managed thin clients.
• Users can access security best practices at Rockwell Automation's Knowledgebase article, QA43240 Security Best Practices.
• For more information, users should see Rockwell Automation's security advisory (login required).

Affected Vendors

Affected Products (6)

Affected Sectors

Critical Manufacturing