← CVE Intelligence

CVE-2023-27856

Rockwell Automation ThinManager ThinServer Path Traversal Download PUBLISHED

Description (CNA)

In affected versions, path traversal exists when processing a message of type 8 in Rockwell Automation's ThinManager ThinServer. An unauthenticated remote attacker can exploit this vulnerability to download arbitrary files on the disk drive where ThinServer.exe is installed.

Affected (CNA)

Vendor / productVersions
Rockwell Automation / ThinManager ThinServeraffected 6.x - 10.x; affected 11.0.0 - 11.0.5; affected 11.1.0 - 11.1.5; affected 11.2.0 - 11.2.6; affected 12.0.0 - 12.0.4; affected 12.1.0 - 12.1.5; affected 13.0.0 - 13.0.1

CWE

CWE-22

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.