CVE-2025-9065

8.8HIGH

A server-side request forgery security issue exists within Rockwell Automation ThinManager® software due to the lack of input sanitization. Authenticated attackers can exploit this vulnerability by sp

Опубликовано: 9/9/2025Обновлено: 10/20/2025
Посмотреть на NVDПосмотреть на MITRE

Описание

A server-side request forgery security issue exists within Rockwell Automation ThinManager® software due to the lack of input sanitization. Authenticated attackers can exploit this vulnerability by specifying external SMB paths, exposing the ThinServer® service account NTLM hash.

ИИ-АнализНа базе ИИ

Затронутые продукты

rockwellautomationthinmanager

Ссылки