Rockwell Automation ThinManager

Risk Summary

Successful exploitation of this vulnerability could expose the ThinServer service account NTLM hash.

CVEs (1)

Remediations

• Rockwell Automation corrected the issue in version 14.1 and recommends users upgrade to this version or newer. Users of the affected software who are not able to upgrade to one of the corrected versions should follow Rockwell Automation's security best practices.
• Users can also reference the following article from Microsoft to block NTLM connections on SMB in Windows Server 2025.
• For more information about these issues, refer to the Rockwell Automation security advisory.

Affected Vendors

Affected Products (1)

Affected Sectors

Critical Manufacturing