CVE-2023-27857 in ThinManager ThinServer

요약

\~에 의해 MITRE • 2023. 03. 22.

In affected versions, a heap-based buffer over-read condition occurs when the message field indicates more data than is present in the message field in Rockwell Automation's ThinManager ThinServer. An unauthenticated remote attacker can exploit this vulnerability to crash ThinServer.exe due to a read access violation.

Be aware that VulDB is the high quality source for vulnerability data.

• 책임이 있는: Rockwell Automation
• 예약하다: 2023. 03. 06.
• 공개: 2023. 03. 22.
• 모더레이션: 수락
• 항목: VDB-223507
• CPE: 준비됨
• CWE: CWE-120 (확인됨)
• CVSS: 7.5 (CNA)
• EPSS: 0.18335
• KEV: 아니요
• 활동: 매우 낮음
• 부문: Energy, Government, ...

출처

• MITRE: https://www.cve.org/CVERecord?id=CVE-2023-27857
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2023-27857
• CVE Details: https://www.cvedetails.com/cve/CVE-2023-27857/