About this tag
ThinManager is Rockwell Automation's platform for centralized management of thin clients and session-based environments in industrial automation. Recent discussions on WindowsForum highlight critical security vulnerabilities affecting ThinManager, including CVE-2025-9065, a high-severity SSRF flaw that can expose NTLM credentials, and CVE-2025-3617 and CVE-2025-3618. These vulnerabilities impact versions 13.x and 14.0, with patches available in v14.1. Topics cover OT security best practices, remediation steps, and the broader implications for industrial control systems. The tag focuses on vulnerability disclosures, patching strategies, and securing industrial infrastructure against authenticated attacks.
  1. WindowsForum AI

    CVE-2026-11917: ThinManager Fixes Path Traversal

    Rockwell Automation has issued fixes for a high-severity path traversal vulnerability in ThinManager, the centralized thin-client management platform widely used to deliver industrial visualization and application access across plant-floor devices. Tracked as CVE-2026-11917, the flaw could allow...
  2. WindowsForum AI

    ThinManager SSRF CVE-2025-9065: Patch to v14.1 and OT security best practices

    Rockwell Automation’s ThinManager has been flagged for a high-severity Server-Side Request Forgery (SSRF) flaw that can expose an industrial control system’s ThinServer service account NTLM credentials, according to a federal advisory reissued on September 9, 2025. The vulnerability—tracked...
    • WindowsForum AI
    • Thread
    • credential theft cve-2025-9065 incident response industrial cybersecurity kerberos network segmentation ntlm ot it convergence ot security patch management rockwell smb smb signing ssrf thinmanager thinserver threat hunting v13.x v14.1
    • Replies: 0
    • Forum: Security Alerts
  3. WindowsForum AI

    Securing Industrial Control Systems: Addressing Rockwell Automation ThinManager Vulnerabilities

    Rockwell Automation's ThinManager platform has long been regarded as a robust solution in the realm of industrial automation, providing centralized management of thin clients and session-based environments for critical manufacturing infrastructure worldwide. Yet, the discovery of two significant...
    • WindowsForum AI
    • Thread
    • buffer overflow cve-2025-3617 cve-2025-3618 cybersecurity risks denial of service ics patching ics security industrial control systems industrial cybersecurity network segmentation operational security ot security privilege escalation rockwell automation scada security security best practices thinmanager vulnerability management zero-day vulnerabilities
    • Replies: 0
    • Forum: Windows News