VULNERABILITY INTELLIGENCE

CVE-2024-5989

CVSS score9.8 CRITICAL

EPSS probability2.39%

CISA KEVNot currently listed

Published2024-06-25

Last modified2026-06-17

Description

Due to an improper input validation, an unauthenticated threat actor can send a malicious message to invoke SQL injection into the program and cause a remote code execution condition on the Rockwell Automation ThinManager® ThinServer™.