We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

THREATINT
PUBLISHED

CVE-2025-3618

Local Privilege Escalation Vulnerability



Description

A denial-of-service vulnerability exists in the Rockwell Automation ThinManager. The software fails to adequately verify the outcome of memory allocation while processing Type 18 messages. If exploited, a threat actor could cause a denial-of-service on the target software.

Reserved 2025-04-14 | Published 2025-04-15 | Updated 2025-04-17 | Assigner Rockwell


HIGH: 8.5CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Problem types

119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

Product status

Default status
unaffected

v14.0.1 and earlier
affected

References

www.rockwellautomation.com/...dvisories/advisory.SD1727.html

cve.org (CVE-2025-3618)

nvd.nist.gov (CVE-2025-3618)

Download JSON

Share this page
https://cve.threatint.eu/CVE/CVE-2025-3618

Support options

Helpdesk Chat, Email, Knowledgebase