Rockwell Automation ThinManager Privilege Escalation Vulnerability

A privilege escalation vulnerability exists in Rockwell Automation ThinManager versions 14.0.0 and 14.0.1. The issue arises because, during startup, the software deletes files in the temporary folder, which allows the Access Control Entry of the directory to inherit permissions from the parent directory. This behavior could be exploited by a threat actor to gain elevated privileges.

Impact

Exploitation of this vulnerability could allow a threat actor to inherit elevated privileges on the affected system.

Remediation

Users are advised to update to ThinManager version 14.0.2 or later. For information on how to mitigate security risks on industrial automation control systems, Rockwell Automation suggests implementing security best practices to minimize vulnerability risks.