CVE-2023-27856: high-severity vulnerability in Rockwell Automation ThinManager ThinServer
Rockwell Automation ThinManager ThinServer Path Traversal Download
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
58Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendcvss 7.5epss 77%
from disclosure to weapon15 days
Published on NVDMar 21
metasploit+15d
In affected versions, path traversal exists when processing a message of type 8
in Rockwell Automation's ThinManager ThinServer.
An unauthenticated remote attacker can exploit this vulnerability to download arbitrary files on the disk drive where ThinServer.exe is installed.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected products
Rockwell Automation · ThinManager ThinServerRelated CVEs — Rockwell Automation ThinManager ThinServer
In the same product, most dangerous first.
CVE-2023-2915HIGHRockwell Automation ThinManager Thinserver Software Vulnerable to Input Validation VulnerabilityEPSS 81.8%CVE-2023-2917CRITICALRockwell Automation ThinManager Thinserver Software Vulnerable to Input Validation VulnerabilityEPSS 72.2%CVE-2023-2914HIGHRockwell Automation ThinManager Thinserver Software Vulnerable to Input Validation VulnerabilitiyEPSS 39.9%CVE-2022-38742HIGHRockwell Automation ThinManager Software Vulnerable to Arbitrary Code Execution and Denial-Of-Service AttackEPSS 22.7%CVE-2023-27857HIGHRockwell Automation ThinManager ThinServer Heap-Based Buffer OverflowEPSS 18.3%CVE-2023-27855CRITICALRockwell Automation ThinManager ThinServer Path Traversal UploadEPSS 13.5%