high7.5
CVE-2023-27856
In affected versions, path traversal exists when processing a message of type 8 in Rockwell Automation's ThinManager ThinServer.
Impact
In affected versions, path traversal exists when processing a message of type 8 in Rockwell Automation's ThinManager ThinServer. An unauthenticated remote attacker can exploit this vulnerability to download arbitrary files on the disk drive where ThinServer.exe is installed.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Rockwellautomation | Thinmanager | from 6.0.0 through 10.0.2 from 11.0.0 through 11.0.5 from 11.1.0 through 11.1.5 from 11.2.0 through 11.2.6 from 12.0.0 through 12.0.4 from 12.1.0 through 12.1.5 |