230 lines
11 KiB
JSON
230 lines
11 KiB
JSON
{
|
||
"dataType": "CVE_RECORD",
|
||
"dataVersion": "5.1",
|
||
"cveMetadata": {
|
||
"cveId": "CVE-2024-7987",
|
||
"assignerOrgId": "b73dd486-f505-4403-b634-40b078b177f0",
|
||
"state": "PUBLISHED",
|
||
"assignerShortName": "Rockwell",
|
||
"dateReserved": "2024-08-19T20:06:26.723Z",
|
||
"datePublished": "2024-08-26T14:40:29.255Z",
|
||
"dateUpdated": "2024-08-26T17:29:09.449Z"
|
||
},
|
||
"containers": {
|
||
"cna": {
|
||
"affected": [
|
||
{
|
||
"defaultStatus": "unaffected",
|
||
"product": "ThinManager® ThinServer™",
|
||
"vendor": "Rockwell Automation",
|
||
"versions": [
|
||
{
|
||
"status": "affected",
|
||
"version": "11.1.0-11.1.7 11.2.0-11.2.8 12.0.0-12.0.6 12.1.0-12.1.7 13.0.0-13.0.4 13.1.0-13.1.2 13.2.0-13.2.1"
|
||
}
|
||
]
|
||
}
|
||
],
|
||
"datePublic": "2024-08-26T13:00:00.000Z",
|
||
"descriptions": [
|
||
{
|
||
"lang": "en",
|
||
"supportingMedia": [
|
||
{
|
||
"base64": false,
|
||
"type": "text/html",
|
||
"value": "<span style=\"background-color: rgb(255, 255, 255);\">A remote code execution vulnerability exists in the Rockwell Automation <span style=\"background-color: rgb(255, 255, 255);\">ThinManager® ThinServer™</span>\nthat allows a threat actor to execute arbitrary code with System privileges. To exploit this vulnerability and a threat actor must abuse the ThinServer™ service by creating a junction and use it to upload arbitrary files. </span>"
|
||
}
|
||
],
|
||
"value": "A remote code execution vulnerability exists in the Rockwell Automation ThinManager® ThinServer™\nthat allows a threat actor to execute arbitrary code with System privileges. To exploit this vulnerability and a threat actor must abuse the ThinServer™ service by creating a junction and use it to upload arbitrary files."
|
||
}
|
||
],
|
||
"impacts": [
|
||
{
|
||
"capecId": "CAPEC-576",
|
||
"descriptions": [
|
||
{
|
||
"lang": "en",
|
||
"value": "CAPEC-576 Group Permission Footprinting"
|
||
}
|
||
]
|
||
}
|
||
],
|
||
"metrics": [
|
||
{
|
||
"cvssV4_0": {
|
||
"Automatable": "NOT_DEFINED",
|
||
"Recovery": "NOT_DEFINED",
|
||
"Safety": "NOT_DEFINED",
|
||
"attackComplexity": "LOW",
|
||
"attackRequirements": "NONE",
|
||
"attackVector": "LOCAL",
|
||
"baseScore": 8.5,
|
||
"baseSeverity": "HIGH",
|
||
"privilegesRequired": "LOW",
|
||
"providerUrgency": "NOT_DEFINED",
|
||
"subAvailabilityImpact": "NONE",
|
||
"subConfidentialityImpact": "NONE",
|
||
"subIntegrityImpact": "NONE",
|
||
"userInteraction": "NONE",
|
||
"valueDensity": "NOT_DEFINED",
|
||
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
|
||
"version": "4.0",
|
||
"vulnAvailabilityImpact": "HIGH",
|
||
"vulnConfidentialityImpact": "HIGH",
|
||
"vulnIntegrityImpact": "HIGH",
|
||
"vulnerabilityResponseEffort": "NOT_DEFINED"
|
||
},
|
||
"format": "CVSS",
|
||
"scenarios": [
|
||
{
|
||
"lang": "en",
|
||
"value": "GENERAL"
|
||
}
|
||
]
|
||
}
|
||
],
|
||
"problemTypes": [
|
||
{
|
||
"descriptions": [
|
||
{
|
||
"description": "ThinManager® ThinServer™ Remote Code Execution",
|
||
"lang": "en"
|
||
}
|
||
]
|
||
}
|
||
],
|
||
"providerMetadata": {
|
||
"orgId": "b73dd486-f505-4403-b634-40b078b177f0",
|
||
"shortName": "Rockwell",
|
||
"dateUpdated": "2024-08-26T14:40:29.255Z"
|
||
},
|
||
"references": [
|
||
{
|
||
"url": "https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1692.html"
|
||
}
|
||
],
|
||
"solutions": [
|
||
{
|
||
"lang": "en",
|
||
"supportingMedia": [
|
||
{
|
||
"base64": false,
|
||
"type": "text/html",
|
||
"value": "<table><tbody><tr><td><p>ffected Product</p></td><td><p>First Known in software version</p></td><td><p>Corrected in software version</p></td></tr><tr><td><p>ThinManager® ThinServer™</p></td><td><p>11.1.0-11.1.7<br>11.2.0-11.2.8<br>12.0.0-12.0.6<br>12.1.0-12.1.7<br>13.0.0-13.0.4<br>13.1.0-13.1.2<br>13.2.0-13.2.1</p></td><td><p>11.1.8</p><p>11.2.9</p><p>12.0.7</p><p>12.1.8</p><p>13.0.5</p><p>13.1.3</p><p>13.2.2</p></td></tr></tbody></table><br>\n\n<p><b>Mitigations and Workarounds</b></p><p>Customers using the affected software are encouraged to implement our suggested security best practices to minimize the risk of vulnerability.</p><p>· <a target=\"_blank\" rel=\"nofollow\" href=\"https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1085012/loc/en_US#__highlight\">Security Best Practices</a></p>\n\n<br>"
|
||
}
|
||
],
|
||
"value": "ffected Product\n\nFirst Known in software version\n\nCorrected in software version\n\nThinManager® ThinServer™\n\n11.1.0-11.1.7\n11.2.0-11.2.8\n12.0.0-12.0.6\n12.1.0-12.1.7\n13.0.0-13.0.4\n13.1.0-13.1.2\n13.2.0-13.2.1\n\n11.1.8\n\n11.2.9\n\n12.0.7\n\n12.1.8\n\n13.0.5\n\n13.1.3\n\n13.2.2\n\n\n\n\nMitigations and Workarounds\n\nCustomers using the affected software are encouraged to implement our suggested security best practices to minimize the risk of vulnerability.\n\n· Security Best Practices https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1085012/loc/en_US#__highlight"
|
||
}
|
||
],
|
||
"source": {
|
||
"advisory": "SD1692",
|
||
"discovery": "EXTERNAL"
|
||
},
|
||
"title": "Rockwell Automation ThinManager® ThinServer™ Information Disclosure and Remote Code Execution Vulnerabilities",
|
||
"x_generator": {
|
||
"engine": "Vulnogram 0.2.0"
|
||
}
|
||
},
|
||
"adp": [
|
||
{
|
||
"problemTypes": [
|
||
{
|
||
"descriptions": [
|
||
{
|
||
"type": "CWE",
|
||
"cweId": "CWE-434",
|
||
"lang": "en",
|
||
"description": "CWE-434 Unrestricted Upload of File with Dangerous Type"
|
||
}
|
||
]
|
||
}
|
||
],
|
||
"affected": [
|
||
{
|
||
"vendor": "rockwellautomation",
|
||
"product": "thinmanager_thinserver",
|
||
"cpes": [
|
||
"cpe:2.3:a:rockwellautomation:thinmanager_thinserver:*:*:*:*:*:*:*:*"
|
||
],
|
||
"defaultStatus": "unknown",
|
||
"versions": [
|
||
{
|
||
"version": "11.1.0",
|
||
"status": "affected",
|
||
"lessThanOrEqual": "11.1.7",
|
||
"versionType": "custom"
|
||
},
|
||
{
|
||
"version": "11.2.0",
|
||
"status": "affected",
|
||
"lessThanOrEqual": "11.2.8",
|
||
"versionType": "custom"
|
||
},
|
||
{
|
||
"version": "12.0.0",
|
||
"status": "affected",
|
||
"lessThanOrEqual": "12.0.6",
|
||
"versionType": "custom"
|
||
},
|
||
{
|
||
"version": "12.1.0",
|
||
"status": "affected",
|
||
"lessThanOrEqual": "12.1.7",
|
||
"versionType": "custom"
|
||
},
|
||
{
|
||
"version": "13.0.0",
|
||
"status": "affected",
|
||
"lessThanOrEqual": "13.0.4",
|
||
"versionType": "custom"
|
||
},
|
||
{
|
||
"version": "13.1.0",
|
||
"status": "affected",
|
||
"lessThanOrEqual": "13.1.2",
|
||
"versionType": "custom"
|
||
},
|
||
{
|
||
"version": "13.2.0",
|
||
"status": "affected",
|
||
"lessThanOrEqual": "13.2.1",
|
||
"versionType": "custom"
|
||
}
|
||
]
|
||
}
|
||
],
|
||
"metrics": [
|
||
{
|
||
"other": {
|
||
"type": "ssvc",
|
||
"content": {
|
||
"timestamp": "2024-08-26T17:20:29.756565Z",
|
||
"id": "CVE-2024-7987",
|
||
"options": [
|
||
{
|
||
"Exploitation": "none"
|
||
},
|
||
{
|
||
"Automatable": "no"
|
||
},
|
||
{
|
||
"Technical Impact": "total"
|
||
}
|
||
],
|
||
"role": "CISA Coordinator",
|
||
"version": "2.0.3"
|
||
}
|
||
}
|
||
}
|
||
],
|
||
"title": "CISA ADP Vulnrichment",
|
||
"providerMetadata": {
|
||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||
"shortName": "CISA-ADP",
|
||
"dateUpdated": "2024-08-26T17:29:09.449Z"
|
||
}
|
||
}
|
||
]
|
||
}
|
||
} |