Vulnerability · Published Oct 25, 2024 · Assigned by Rockwell
CVE-2024-10387Rockwell Automation FactoryTalk ThinManager Denial-of-Service Vulnerability
High 7.5
In plain English
A high-severity out-of-bounds read in FactoryTalk ThinManager from Rockwell Automation. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 8.0% (higher than 95% of all known vulnerabilities).
Severity (CVSS 3.1)7.5High
Exploit odds (30 days)8.0%top 5.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
CVE-2024-10387 IMPACT A Denial-of-Service vulnerability exists in the affected product. The vulnerability could allow a threat actor with network access to send crafted messages to the device, potentially resulting in Denial-of-Service.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Rockwell Automation | FactoryTalk ThinManager | 11.2.0-11.2.912.0.0-12.0.712.1.0-12.1.813.0.0-13.0.513.1.0-13.1.313.2.0-13.2.214.0.0 |
Weakness: CWE-125 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H