Description (CNA)
In affected versions, a heap-based buffer over-read condition occurs when the message field indicates more data than is present in the message field in Rockwell Automation's ThinManager ThinServer. An unauthenticated remote attacker can exploit this vulnerability to crash ThinServer.exe due to a read access violation.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Rockwell Automation / ThinManager ThinServer | affected 6.x - 10.x; affected 11.0.0 - 11.0.5; affected 11.1.0 - 11.1.5; affected 11.2.0 - 11.2.6; affected 12.0.0 - 12.0.4; affected 12.1.0 - 12.1.5; affected 13.0.0 - 13.0.1 |
CWE
CWE-125
References
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.