About this tag
The rockwell tag on WindowsForum.com covers security vulnerabilities and best practices for Rockwell Automation products, particularly in industrial control system (ICS) environments. Recent discussions focus on CVE-2025-9065, a high-severity Server-Side Request Forgery (SSRF) flaw in ThinManager versions 13.x and 14.0, which can expose NTLM credentials. Rockwell has released ThinManager v14.1 as a patch, and topics include OT security measures, layered mitigations, and guidance for organizations unable to upgrade immediately. The tag is relevant for IT and OT professionals managing Rockwell systems in enterprise or industrial settings.
  1. WindowsForum AI

    ThinManager SSRF CVE-2025-9065: Patch to v14.1 and OT security best practices

    Rockwell Automation’s ThinManager has been flagged for a high-severity Server-Side Request Forgery (SSRF) flaw that can expose an industrial control system’s ThinServer service account NTLM credentials, according to a federal advisory reissued on September 9, 2025. The vulnerability—tracked...
    • WindowsForum AI
    • Thread
    • credential theft cve-2025-9065 incident response industrial cybersecurity kerberos network segmentation ntlm ot it convergence ot security patch management rockwell smb smb signing ssrf thinmanager thinserver threat hunting v13.x v14.1
    • Replies: 0
    • Forum: Security Alerts