CVE-2024-5990

Due to an improper input validation, an unauthenticated threat actor can send a malicious message to a monitor thread within Rockwell Automation ThinServer™ and cause a denial-of-service condition on the affected device.

Score

CVSS 4.0 8.7 High

Status

Modified - PSIRT@rockwellautomation.com

Published

2024-06-25

Last modified

2025-08-27

Weaknesses

CWE-20

Affected products

• Thinmanager Thinserver (Rockwell Automation)
• Thinmanager (Rockwellautomation)
• Thinserver (Rockwellautomation)

References

• https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1677.html