CVE-2023-27856

HIGH

ThinManager Path Traversal (CVE-2023-27856) Arbitrary File Download

Title source: metasploit

Description

In affected versions, path traversal exists when processing a message of type 8 in Rockwell Automation's ThinManager ThinServer. An unauthenticated remote attacker can exploit this vulnerability to download arbitrary files on the disk drive where ThinServer.exe is installed.

Exploits (1)

metasploit WORKING POC

by Michael Heinzl, Tenable · rubypoc

https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/thinmanager_traversal_download.rb

View Code ZIP pw:eip

References (1)

[Permissions Required, Vendor Advisory] https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1138640

Scores

CVSS v3 7.5

EPSS 0.5473

EPSS Percentile 98.0%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

CWE

CWE-22

Status published

Products (3)

rockwellautomation/thinmanager 13.0.0

rockwellautomation/thinmanager 13.0.1

rockwellautomation/thinmanager 6.0.0 - 10.0.2

Published Mar 22, 2023

Tracked Since Feb 18, 2026