Skip to content
OpenAdvisories
Critical ICSA-23-234-03 3 CVEs

Rockwell Automation ThinManager ThinServer

Published Aug 22, 2023 · Updated Aug 22, 2023

Vendor: Rockwell Automation Product: ThinManager® ThinServer™

Summary

Successful exploitation of these vulnerabilities could allow an attacker to remotely delete arbitrary files with system privileges.

Vulnerabilities 3

  • Critical 9.8
    CVE-2023-2917 Public exploit EPSS 72%

    Rockwell Automation ThinManager Thinserver Software Vulnerable to Input Validation Vulnerability

    The Rockwell Automation Thinmanager Thinserver is impacted by an improper input validation vulnerability.  Due to an improper input validation, a path traversal vulnerability exists, via the filename field, when the ThinManager processes a certain function. I…

    Rockwell Automation ThinManager® ThinServer™ ICS / OT
  • High 7.5
    CVE-2023-2914 EPSS 40%

    Rockwell Automation ThinManager Thinserver Software Vulnerable to Input Validation Vulnerabilitiy

    The Rockwell Automation Thinmanager Thinserver is impacted by an improper input validation vulnerability, an integer overflow condition exists in the affected products. When the ThinManager processes incoming messages, a read access violation occurs and termi…

    Rockwell Automation ThinManager® ThinServer™ ICS / OT
  • High 7.5
    CVE-2023-2915 Public exploit EPSS 82%

    Rockwell Automation ThinManager Thinserver Software Vulnerable to Input Validation Vulnerability

    The Rockwell Automation Thinmanager Thinserver is impacted by an improper input validation vulnerability, Due to improper input validation, a path traversal vulnerability exists when the ThinManager software processes a certain function. If exploited, an unau…

    Rockwell Automation ThinManager® ThinServer™ ICS / OT

Revision history

  1. #1

    Initial Publication

References