CVE-2024-7986

A vulnerability exists in the Rockwell Automation ThinManager® ThinServer that allows a threat actor to disclose sensitive information. A threat actor can exploit this vulnerability by abusing the ThinServer™ service to read arbitrary files by creating a junction that points to the target directory.

CVSS v3 7.5 HIGH

7.5^/10

CVSS v3 : HIGH

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1692.html	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:rockwellautomation:thinmanager::::::::
	cpe:2.3:a:rockwellautomation:thinmanager::::::::
	cpe:2.3:a:rockwellautomation:thinmanager::::::::
	cpe:2.3:a:rockwellautomation:thinmanager::::::::
	cpe:2.3:a:rockwellautomation:thinmanager::::::::
	cpe:2.3:a:rockwellautomation:thinmanager::::::::
	cpe:2.3:a:rockwellautomation:thinmanager::::::::

History

17 Jun 2026, 08:21

Type	Values Removed	Values Added
Summary		(es) Existe una vulnerabilidad en Rockwell Automation ThinManager® ThinServer que permite a un actor de amenazas revelar información confidencial. Un actor de amenazas puede explotar esta vulnerabilidad abusando del servicio ThinServer™ para leer archivos arbitrarios creando una unión que apunte al directorio de destino.
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 7.5
First Time		Rockwellautomation Rockwellautomation thinmanager
CPE		cpe:2.3:a:rockwellautomation:thinmanager::::::::
References	~~() https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1692.html -~~	() https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1692.html - Vendor Advisory

23 Aug 2024, 12:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2024-08-23 12:15

Updated : 2026-06-17 08:21

NVD link : CVE-2024-7986

Mitre link : CVE-2024-7986

CVE.ORG link : CVE-2024-7986

JSON object : View

Products Affected

rockwellautomation

thinmanager

CWE

CWE-732

Incorrect Permission Assignment for Critical Resource

{"id": "CVE-2024-7986", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2024-7986", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2024-08-28T16:20:54.169556Z"}}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 3.9}], "cvssMetricV40": [{"type": "Secondary", "source": "PSIRT@rockwellautomation.com", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 6.8, "Automatable": "NOT_DEFINED", "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "LOW", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "NONE", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "PSIRT@rockwellautomation.com", "affectedData": [{"vendor": "Rockwell Automation", "product": "ThinManager\u00ae ThinServer\u2122", "versions": [{"status": "affected", "version": "11.1.0-11.1.7 11.2.0-11.2.8 12.0.0-12.0.6 12.1.0-12.1.7 13.0.0-13.0.4 13.1.0-13.1.2 13.2.0-13.2.1"}], "defaultStatus": "unaffected"}]}], "published": "2024-08-23T12:15:03.920", "references": [{"url": "https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1692.html", "tags": ["Vendor Advisory"], "source": "PSIRT@rockwellautomation.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "PSIRT@rockwellautomation.com", "description": [{"lang": "en", "value": "CWE-732"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-732"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability exists in the Rockwell Automation\u00a0ThinManager\u00ae ThinServer\u00a0that allows a threat actor to disclose sensitive information. A threat actor can exploit this vulnerability by abusing the ThinServer\u2122 service to read arbitrary files by creating a junction that points to the target directory."}, {"lang": "es", "value": "Existe una vulnerabilidad en Rockwell Automation ThinManager\u00ae ThinServer que permite a un actor de amenazas revelar informaci\u00f3n confidencial. Un actor de amenazas puede explotar esta vulnerabilidad abusando del servicio ThinServer\u2122 para leer archivos arbitrarios creando una uni\u00f3n que apunte al directorio de destino."}], "lastModified": "2026-06-17T08:21:37.187", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:rockwellautomation:thinmanager:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2BC59B57-F8F5-4979-826B-EAA0A8456B2A", "versionEndExcluding": "11.1.8", "versionStartIncluding": "11.1.0"}, {"criteria": "cpe:2.3:a:rockwellautomation:thinmanager:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "79481998-C98B-4486-A2DC-C4DE324DCA10", "versionEndExcluding": "11.2.9", "versionStartIncluding": "11.2.0"}, {"criteria": "cpe:2.3:a:rockwellautomation:thinmanager:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BFD553E2-EB04-4D97-AD70-2175933E3DCD", "versionEndExcluding": "12.0.7", "versionStartIncluding": "12.0.0"}, {"criteria": "cpe:2.3:a:rockwellautomation:thinmanager:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FC5BBCD2-0C47-4B48-81DD-D56D5677BFA0", "versionEndExcluding": "12.1.8", "versionStartIncluding": "12.1.0"}, {"criteria": "cpe:2.3:a:rockwellautomation:thinmanager:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7EEDB253-45FB-4722-994A-E0EF00C7F405", "versionEndExcluding": "13.0.5", "versionStartIncluding": "13.0.0"}, {"criteria": "cpe:2.3:a:rockwellautomation:thinmanager:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F2FB9C58-1AAF-46CB-BBB5-909223EE5572", "versionEndExcluding": "13.1.3", "versionStartIncluding": "13.1.0"}, {"criteria": "cpe:2.3:a:rockwellautomation:thinmanager:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BB3AA59A-9CA4-4CD0-981C-B974A94BAC30", "versionEndExcluding": "13.2.2", "versionStartIncluding": "13.2.0"}], "operator": "OR"}]}], "sourceIdentifier": "PSIRT@rockwellautomation.com"}