CVE-2023-2914CWE-20

Rockwell Automation ThinManager Thinserver Software Vulnerable to Input Validation Vulnerabilitiy

High · published August 17, 2023

CVSS v3.1
7.5
EPSS
40%
Percentile
98.6
In the wild
Unconfirmed
What it is

The Rockwell Automation Thinmanager Thinserver is impacted by an improper input validation vulnerability, an integer overflow condition exists in the affected products. When the ThinManager processes incoming messages, a read access violation occurs and terminates the process. A malicious user could exploit this vulnerability by sending a crafted synchronization protocol message and causing a denial of service condition in the software.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.39935 · 98.6th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2023-08-17T15:01Z
EPSS history
Timeline
  • 17 AUG 15:01Z
    Rockwell Automation ThinManager Thinserver Software Vulnerable to Input Validation Vulnerabilitiy
    cvelistv5