by Kastro
Paper/Archive/CVE-2023-27855

CVE-2023-27855

Rockwell Automation ThinManager ThinServer — Rockwell Automation ThinManager ThinServer Path Traversal Upload

EPSS 13%CVSS 9.8
critical.is priorityof 100
49
CVSS 9.8 (NVD, CNA agree)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 96.4.964 × 2019.3No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

In affected versions, a path traversal exists when processing a message in Rockwell Automation's ThinManager ThinServer. An unauthenticated remote attacker could potentially exploit this vulnerability to upload arbitrary files to any directory on the disk drive where ThinServer.exe is installed. The attacker could overwrite existing executable files with attacker-controlled, malicious contents, potentially causing remote code execution.

Affected

ProductAffectedFixed inSource
ThinManager ThinServer6.x - 10.x–CNA
ThinManager ThinServer11.0.0 - 11.0.5–CNA
ThinManager ThinServer11.1.0 - 11.1.5–CNA
ThinManager ThinServer11.2.0 - 11.2.6–CNA
ThinManager ThinServer12.0.0 - 12.0.4–CNA
ThinManager ThinServer12.1.0 - 12.1.5–CNA
ThinManager ThinServer13.0.0 - 13.0.1–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Rockwell (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refrockwellautomation.custhelp.com/app/answers/answer_view/a_id/1138640