Rockwell Automation Alert
6819Warning Date
Severity Level
Warning Number
Target Sector
28 September, 2022
● High
2022-5286
Manufacturing
Rockwell Automation has released a security update to address a vulnerability in the following product:
- ThinManager ThinServer
- Versions 11.0.0 through 11.0.4
- Versions 11.1.0 through 11.1.4
- Versions 11.2.0 through 11.2.5
- Versions 12.0.0 through 12.0.2
- Versions 12.1.0 through 12.1.3
- Version 13.0.0
Attacker could exploit this vulnerability by doing the following:
- Execute arbitrary code remotely
Rockwell Automation recommends the following mitigations and compensating controls in order to reduce risk associated with these vulnerabilities:
- Minimizing network exposure for all control system devices and/or systems
- Locating control system networks and devices behind firewalls and isolating them from the enterprise/business network
- When remote access is required, use secure methods such as virtual private networks (VPNs)
For more information, contact the company through: