CVE-2024-7986 Information

Description

A vulnerability exists in the Rockwell Automation ThinManager® ThinServer that allows a threat actor to disclose sensitive information. A threat actor can exploit this vulnerability by abusing the ThinServer™ service to read arbitrary files by creating a junction that points to the target directory.

Reference

https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1692.html