Rockwell Automation ThinManager Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in Rockwell Automation ThinManager versions through 14.0.1. The issue arises because the software does not properly validate the results of memory allocation when handling Type 18 messages. This flaw can be exploited to disrupt the normal operation of the software, causing a denial-of-service condition.

Impact

Exploitation of this vulnerability leads to a denial-of-service condition, causing the target software to become unresponsive or unavailable.

Remediation

Users are advised to update to ThinManager version 14.0.2 or later. For versions 11.2.11, 12.0.9, 12.1.10, 13.0.7, and 13.1.5, consult the Rockwell Automation Trust Center for guidance on applying security best practices to minimize vulnerability risks.