CVE-2025-9065 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A server-side request forgery security issue exists within Rockwell Automation ThinManager® software due to the lack of input sanitization. Authenticated attack…
High CVSS: 8.6

CVE-2025-9065

A server-side request forgery security issue exists within Rockwell Automation ThinManager® software due to the lack of input sanitization. Authenticated attackers can exploit this vulnerability by specifying external SMB paths, exposing the ThinServer® service account NTLM hash.
Vendor
Rockwellautomation
Product
Thinmanager
CWE
CWE-610
Yayın Tarihi
2025-09-09 13:15:32
Güncelleme
2025-10-20 19:17:27
Source Identifier
PSIRT@rockwellautomation.com
KEV Date Added
-

Kategoriler

Referanslar