Skip to content
CVE PROGRAM SOURCE RECORD8.5 High

CVE-2025-3618

Local Privilege Escalation Vulnerability

Description

A denial-of-service vulnerability exists in the Rockwell Automation ThinManager. The software fails to adequately verify the outcome of memory allocation while processing Type 18 messages. If exploited, a threat actor could cause a denial-of-service on the target software.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Rockwell Automation ThinManager

Default version status: unaffected

  • v14.0.1 and earlieraffected

References