CVEvulnerability

CVE-2023-27857

7.5 HIGH Published 2023-03-22 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-03-22
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-125

Description

In affected versions, a heap-based buffer over-read condition occurs when the message field indicates more data than is present in the message field in Rockwell Automation's ThinManager ThinServer.  An unauthenticated remote attacker can exploit this vulnerability to crash ThinServer.exe due to a read access violation.

Affected configurations

• rockwellautomation thinmanager (>= 11.0.0 < 11.0.5) • rockwellautomation thinmanager (>= 11.1.0 < 11.1.5) • rockwellautomation thinmanager (>= 11.2.0 < 11.2.6) • rockwellautomation thinmanager (>= 12.0.0 < 12.0.3) • rockwellautomation thinmanager (>= 12.1.0 < 12.1.4) • rockwellautomation thinmanager 13.0.0

Related

Weakness · CWE (1)

  • CWE-125 Out-of-bounds Read weakness

References