7.5
Élevée
CVE-2023-27856 In affected versions, path traversal exists when processing a message of type 8 in Rockwell Automation's ThinManager…
Description
In affected versions, path traversal exists when processing a message of type 8 in Rockwell Automation's ThinManager ThinServer. An unauthenticated remote attacker can exploit this vulnerability to download arbitrary files on the disk drive where ThinServer.exe is installed.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| ThinManager ThinServer | Versions non publiées |
Autres CVE de ThinManager ThinServer
Les 8 CVE de ThinManager ThinServer →
CVE-2023-2917
The Rockwell Automation Thinmanager Thinserver is impacted by an improper input validation vulnerability. Due to an…
9.8
Critique
CVE-2023-2915
The Rockwell Automation Thinmanager Thinserver is impacted by an improper input validation vulnerability, Due to…
7.5
Élevée
CVE-2023-2914
The Rockwell Automation Thinmanager Thinserver is impacted by an improper input validation vulnerability, an integer…
7.5
Élevée
CVE-2023-2913
An executable used in Rockwell Automation ThinManager ThinServer can be configured to enable an API feature in the HTTPS…
7.5
Élevée