CVE-2024-45826 IMPACT Due to improper input validation, a path traversal and remote code execution vulnerability exists when the ThinManager® processes a crafted POST request. If exploited, a user can install an executable file.
Weakness
The product uses an externally controlled name or reference that resolves to a resource that is outside of the intended control sphere.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Thinmanager | Rockwellautomation | 13.1.0 (including) | 13.1.3 (excluding) |
| Thinmanager | Rockwellautomation | 13.2.0 (including) | 13.2.2 (excluding) |