CVE-2023-2914
High
Description
The Rockwell Automation Thinmanager Thinserver is impacted by an improper input validation vulnerability, an integer overflow condition exists in the affected products. When the ThinManager processes incoming messages, a read access violation occurs and terminates the process. A malicious user could exploit this vulnerability by sending a crafted synchronization protocol message and causing a denial of service condition in the software.
SeverityHigh
CVSS7.5
Exploit probability—
ProductRockwellautomation Thinmanager Thinserver
PublishedAug 17, 2023
First seenAug 17, 2023
Weakness typeCWE-20Improper input validation
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rockwellautomation thinmanager_thinserver | 11.0.0 ≤ v ≤ 11.0.6, 11.1.0 ≤ v ≤ 11.1.6, 11.2.0 ≤ v ≤ 11.2.7, 12.0.0 ≤ v ≤ 12.0.5, 12.1.0 ≤ v ≤ 12.1.6, 13.0.0 ≤ v ≤ 13.0.2, 13.1.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.