← Back to browse · API

CVE-2024-10386

Severity
CRITICAL
CVSS
9.3
EPSS
0.18947
Risk score
43.83
CISA KEV
No
PoC
No
Published
2024-10-25
Modified
2024-10-25
First seen
2026-08-07
Aliases
EUVD-2024-33077, GHSA-7H35-743G-V6R4
Products
Rockwell Automation:FactoryTalk ThinManager 11.2.0-11.2.9, Rockwell Automation:FactoryTalk ThinManager 12.0.0-12.0.7, Rockwell Automation:FactoryTalk ThinManager 12.1.0-12.1.8, Rockwell Automation:FactoryTalk ThinManager 13.0.0-13.0.5, Rockwell Automation:FactoryTalk ThinManager 13.1.0-13.1.3, Rockwell Automation:FactoryTalk ThinManager 13.2.0-13.2.2, Rockwell Automation:FactoryTalk ThinManager 14.0.0
Sources
euvd EUVD-2024-33077

Description

CVE-2024-10386 IMPACT An authentication vulnerability exists in the affected product. The vulnerability could allow a threat actor with network access to send crafted messages to the device, potentially resulting in database manipulation.

References