Vulnerability · Published Sep 23, 2022 · Assigned by Rockwell

CVE-2022-38742Rockwell Automation ThinManager Software Vulnerable to Arbitrary Code Execution and Denial-Of-Service Attack

High 8.1

In plain English

A high-severity heap buffer overflow in ThinManager ThinServer from Rockwell Automation. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 22.7% (higher than 98% of all known vulnerabilities).

Severity (CVSS 3.1)8.1High

Exploit odds (30 days)22.7%top 2.3% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

Rockwell Automation ThinManager ThinServer versions 11.0.0 - 13.0.0 is vulnerable to a heap-based buffer overflow. An attacker could send a specifically crafted TFTP or HTTPS request, causing a heap-based buffer overflow that crashes the ThinServer process. If successfully exploited, this could expose the server to arbitrary remote code execution.

Affected products (as reported)

Vendor	Product	Versions
Rockwell Automation	ThinManager ThinServer	11.0.0 – through 13.0.0

Weakness: CWE-122 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

References

https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1136847 x_refsource_MISC