216.73.217.22

CVE-2024-10386

· Published 25/10/2024 17:15 · Modified 05/11/2024 20:07

Labels: CVE-2024-10386 2024-10-25CVE-2024-10386CWE-306NVD-CWE-noinfo[email protected]

Essential information

Published
25/10/2024 17:15
Modified
05/11/2024 20:07
Author
Creator
CVSS
9.8 CRITICAL (v3.1)
CISA KEV
No
CWE
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS metrics

Description

CVE-2024-10386 IMPACT An authentication vulnerability exists in the affected product. The vulnerability could allow a threat actor with network access to send crafted messages to the device, potentially resulting in database manipulation.

NVD status

Status
Analyzed — CVE has been recently published to the CVE List and has been received by the NVD.
Source
[email protected]
NVD
View on NVD

Affected products (CPE)

ProductCPE
rockwellautomation / thinmanager cpe:2.3:a:rockwellautomation:thinmanager:*:*:*:*:*:*:*:*
rockwellautomation / thinmanager cpe:2.3:a:rockwellautomation:thinmanager:*:*:*:*:*:*:*:*
rockwellautomation / thinmanager cpe:2.3:a:rockwellautomation:thinmanager:*:*:*:*:*:*:*:*
rockwellautomation / thinmanager cpe:2.3:a:rockwellautomation:thinmanager:*:*:*:*:*:*:*:*
rockwellautomation / thinmanager cpe:2.3:a:rockwellautomation:thinmanager:*:*:*:*:*:*:*:*
rockwellautomation / thinmanager cpe:2.3:a:rockwellautomation:thinmanager:*:*:*:*:*:*:*:*
rockwellautomation / thinmanager cpe:2.3:a:rockwellautomation:thinmanager:14.0.0:*:*:*:*:*:*:*

References