CVE-2023-27857CWE-125

Rockwell Automation ThinManager ThinServer Heap-Based Buffer Overflow

High · published March 22, 2023

CVSS v3.1
7.5
EPSS
18%
Percentile
97.2
In the wild
Unconfirmed
What it is

In affected versions, a heap-based buffer over-read condition occurs when the message field indicates more data than is present in the message field

in Rockwell Automation's ThinManager ThinServer.  An unauthenticated remote attacker can exploit this vulnerability to crash ThinServer.exe due to a read access violation.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.18335 · 97.2th percentile
Weakness
CWE-125 · Out-of-bounds Read
Published
2023-03-22T00:00Z
EPSS history
Timeline
  • 22 MAR 00:00Z
    Rockwell Automation ThinManager ThinServer Heap-Based Buffer Overflow
    cvelistv5