Vulnerability · Published Mar 21, 2023 · Assigned by Rockwell
CVE-2023-27856Rockwell Automation ThinManager ThinServer Path Traversal Download
High 7.5
In plain English
A high-severity path traversal in ThinManager ThinServer from Rockwell Automation. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 77.2% (higher than 99.6% of all known vulnerabilities). Ready-made attack tooling exists: Metasploit.
Severity (CVSS 3.1)7.5High
Exploit odds (30 days)77.2%top 0.4% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack tooling1Metasploit
Official description
In affected versions, path traversal exists when processing a message of type 8 in Rockwell Automation's ThinManager ThinServer. An unauthenticated remote attacker can exploit this vulnerability to download arbitrary files on the disk drive where ThinServer.exe is installed.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Rockwell Automation | ThinManager ThinServer | 6.x - 10.x11.0.0 - 11.0.511.1.0 - 11.1.511.2.0 - 11.2.612.0.0 - 12.0.412.1.0 - 12.1.513.0.0 - 13.0.1 |
Weakness: CWE-22 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N