Rockwell Automation ThinManager ThinServer

Risk Summary

Successful exploitation of this vulnerability could allow a remote actor to leverage the privileges of the server's file system and read arbitrary files stored in it.

CVEs (1)

Remediations

• Rockwell Automation encourages users of the affected software to apply risk mitigations, if possible, and encourages customers to implement their suggested security best practices to minimize the potential risk of vulnerability:
• Update to the corrected software versions: 13.0.3 and 13.1.1 or later.
• Disable the API feature and use a service account with appropriate access for the application.
• For more information, users should see Rockwell Automation's security advisory (login required).

Affected Vendors

Affected Products (1)

Affected Sectors

Critical Manufacturing