CVE-2023-27856 — Rockwell Automation ThinManager ThinServer Path Traversal Download
In affected versions, path traversal exists when processing a message of type 8 in Rockwell Automation's ThinManager ThinServer. An unauthenticated remote attacker can ex…
Published: 2023-03-21 · CVSS: 7.5 · CVSS 3.1
In affected versions, path traversal exists when processing a message of type 8 in Rockwell Automation's ThinManager ThinServer. An unauthenticated remote attacker can exploit this vulnerability to download arbitrary files on the disk drive where ThinServer.exe is installed.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7