Rockwell Automation Thinmanager Thinserver
8 CVEs affecting Rockwell Automation Thinmanager Thinserver. Latest disclosed: 2023-08-17. Critical: 2, High: 6.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-2917 | Critical | 9.8 | 2023-08-17 | The Rockwell Automation Thinmanager Thinserver is impacted by an improper input validation vulnerability. Due to an improper input validation, a path traversa… |
CVE-2023-27855 | Critical | 9.8 | 2023-03-22 | In affected versions, a path traversal exists when processing a message in Rockwell Automation's ThinManager ThinServer. An unauthenticated remote attacker co… |
CVE-2022-38742 | High | 8.1 | 2022-09-23 | Rockwell Automation ThinManager ThinServer versions 11.0.0 - 13.0.0 is vulnerable to a heap-based buffer overflow. An attacker could send a specifically crafte… |
CVE-2023-2915 | High | 7.5 | 2023-08-17 | The Rockwell Automation Thinmanager Thinserver is impacted by an improper input validation vulnerability, Due to improper input validation, a path traversal vu… |
CVE-2023-2914 | High | 7.5 | 2023-08-17 | The Rockwell Automation Thinmanager Thinserver is impacted by an improper input validation vulnerability, an integer overflow condition exists in the affected… |
CVE-2023-2913 | High | 7.5 | 2023-07-18 | An executable used in Rockwell Automation ThinManager ThinServer can be configured to enable an API feature in the HTTPS Server Settings. This feature is disa… |
CVE-2023-27857 | High | 7.5 | 2023-03-22 | In affected versions, a heap-based buffer over-read condition occurs when the message field indicates more data than is present in the message field in R… |
CVE-2023-27856 | High | 7.5 | 2023-03-22 | In affected versions, path traversal exists when processing a message of type 8 in Rockwell Automation's ThinManager ThinServer. An unauthenticated remo… |