PT-2023-1916 · Rockwell Automation · Thinmanager Thinserver

Security Researchers · Published 2023-03-21 · Updated 2025-06-09 · CVE-2023-27855

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Rockwell Automation's ThinManager ThinServer (affected versions not specified)

Description A path traversal issue exists when processing a message in Rockwell Automation's ThinManager ThinServer. An unauthenticated remote attacker could potentially exploit this to upload arbitrary files to any directory on the disk drive where ThinServer.exe is installed. The attacker could overwrite existing executable files with attacker-controlled, malicious contents, potentially causing remote code execution.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

BDU:2023-01525

CVE-2023-27855

Affected Products

Thinmanager Thinserver

References · 8

• https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1138640 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-27855 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-27855 · Security Note
• https://bdu.fstec.ru/vul/2023-01525 · Security Note
• https://t.me/cibsecurity/60426 · Telegram Post
• https://cisa.gov/news-events/ics-advisories/icsa-23-080-06 · Note
• https://t.me/cvenotify/46608 · Telegram Post
• https://twitter.com/threatsbank/status/1932014812852285655 · Twitter Post