CVE-2023-27856 in ThinManager ThinServerinfo

Zusammenfassung

von MITRE • 22.03.2023

A path traversal exists when processing a message of type 8 in Rockwell Automation's ThinManager ThinServer. An unauthenticated remote attacker can exploit this vulnerability to download arbitrary files on the disk drive where ThinServer.exe is installed.

Be aware that VulDB is the high quality source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Reservieren

06.03.2023

Veröffentlichung

22.03.2023

Moderieren

akzeptiert

Eintrag

VDB-223506

CPE

bereit

CWE

CWE-22 (bestätigt)

CVSS

7.5 (CNA)

EPSS

0.77225

KEV

nein

Aktivitäten

very low

Sektor

Transportation, Telecommunication, ...

Quellen

MITRE	https://www.cve.org/CVERecord?id=CVE-2023-27856
NVD	https://nvd.nist.gov/vuln/detail/CVE-2023-27856
CVE Details	https://www.cvedetails.com/cve/CVE-2023-27856/

◂ Zurück Übersicht Weiter ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!