Detections
Analytics

Rockwell Automation ThinManager ThinServer Path Traversal (SD1782)

high Nessus Plugin ID 329330

Synopsis

The Rockwell Automation ThinManager ThinServer is affected by a path traversal vulnerability.

Description

The version of Rockwell Automation ThinManager ThinServer installed on the remote host is 13.0.x through 13.0.7, 13.1.x through 13.1.5, 13.2.x through 13.2.4, or 14.0.x through 14.0.2. It is, therefore, affected by a path traversal vulnerability:

 - A path traversal vulnerability exists due to improper limitation of file save operations within the API. An authenticated attacker could exploit this vulnerability to write arbitrary files to restricted system directories outside of the application's intended directory. (CVE-2026-11917)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Solution

Refer to vendor advisory SD1782 for remediation guidance.

See Also

http://www.nessus.org/u?58dfeced

Plugin Details

Severity: High

ID: 329330

File Name: rockwell_thinmanager_thinserver_sd_1782.nasl

Version: 1.1

Type: Local

Family: SCADA

Published: 7/24/2026

Updated: 7/24/2026

Configuration: Enable thorough checks (optional)

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 4.3

Percentile: 53.64

CVSS v2

Risk Factor: High

Base Score: 8.5

Vector: CVSS2#AV:N/AC:L/Au:S/C:N/I:C/A:C

CVSS Score Source: CVE-2026-11917

CVSS v3

Risk Factor: High

Base Score: 8.1

Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

CVSS v4

Risk Factor: High

Base Score: 7.2

Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N

Vulnerability Information

CPE: cpe:/a:rockwellautomation:thinmanager

Required KB Items: SMB/Registry/Enumerated, installed_sw/Rockwell ThinManager ThinServer

Patch Publication Date: 7/14/2026

Vulnerability Publication Date: 7/14/2026

Reference Information

CVE: CVE-2026-11917

IAVA: 2026-B-0200