CVE-2024-7986 | BDVDB-2026-246552 Detail
Rockwell AutomationThinManager® ThinServer™
Description#
A vulnerability exists in the Rockwell Automation ThinManager® ThinServer that allows a threat actor to disclose sensitive information. A threat actor can exploit this vulnerability by abusing the ThinServer™ service to read arbitrary files by creating a junction that points to the target directory.
Impact#
CAPEC-576 Group Permission Footprinting
Weaknesses#
- CWE-732 Incorrect Permission Assignment for Critical Resource
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.