CVE-2023-27856 (published 2023-03-21T23:55:23.665Z)



In affected versions, path traversal exists when processing a message of type 8

 in Rockwell Automation's ThinManager ThinServer. 

An unauthenticated remote attacker can exploit this vulnerability to download arbitrary files on the disk drive where ThinServer.exe is installed.

 


Affected products: Vendor: Rockwell Automation
Product: ThinManager ThinServer
Versions: 6.x - 10.x, 11.0.0 - 11.0.5, 11.1.0 - 11.1.5, 11.2.0 - 11.2.6, 12.0.0 - 12.0.4, 12.1.0 - 12.1.5, 13.0.0 - 13.0.1