Log in Start free

Vulnerability · Published Aug 17, 2023 · Assigned by Rockwell

CVE-2023-2915Rockwell Automation ThinManager Thinserver Software Vulnerable to Input Validation Vulnerability

High 7.5

In plain English

A high-severity improper input validation in ThinManager ThinServer from Rockwell Automation. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 81.8% (higher than 99.7% of all known vulnerabilities). Ready-made attack tooling exists: Metasploit.

Severity (CVSS 3.1)7.5High
Exploit odds (30 days)81.8%top 0.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack tooling1Metasploit

Official description

The Rockwell Automation Thinmanager Thinserver is impacted by an improper input validation vulnerability, Due to improper input validation, a path traversal vulnerability exists when the ThinManager software processes a certain function. If exploited, an unauthenticated remote threat actor can delete arbitrary files with system privileges. A malicious user could exploit this vulnerability by sending a specifically crafted synchronization protocol message resulting in a denial-of-service condition.

Affected products (as reported)

VendorProductVersions
Rockwell Automation ThinManager ThinServer 11.0.0 - 11.2.611.1.0 - 11.1.611.2.0 - 11.2.712.0.0 - 12.0.512.1.0 - 12.1.613.0.0 - 13.0.213.1.0

Weakness: CWE-20 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References