CVE-2023-27857

Published: Mar 22, 2023Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

In affected versions, a heap-based buffer over-read condition occurs when the message field indicates more data than is present in the message field in Rockwell Automation's ThinManager ThinServer. An unauthenticated remote attacker can exploit this vulnerability to crash ThinServer.exe due to a read access violation.

Affected (6)

Products: Rockwellautomation: Thinmanager

Rockwellautomation

1 product

Thinmanager

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Rockwellautomation Thinmanager	From 11.0.0 to 11.0.5
Rockwellautomation Thinmanager	From 11.1.0 to 11.1.5
Rockwellautomation Thinmanager	From 11.2.0 to 11.2.6
Rockwellautomation Thinmanager	From 12.0.0 to 12.0.3
Rockwellautomation Thinmanager	From 12.1.0 to 12.1.4
Rockwellautomation Thinmanager	Version 13.0.0

Related CWEs

CWE-125

Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

References (2)

https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1138640

Source: PSIRT@rockwellautomation.com

Vendor Advisory

https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1138640

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.