CVE-2023-2914

Rockwell Automation ThinManager Thinserver Software Vulnerable to Input Validation Vulnerabilitiy

State: Published
Severity: 7.5 High
Published: Aug 17, 2023
Updated: Oct 8, 2024
Reserved: May 26, 2023

Description

The Rockwell Automation Thinmanager Thinserver is impacted by an improper input validation vulnerability, an integer overflow condition exists in the affected products. When the ThinManager processes incoming messages, a read access violation occurs and terminates the process. A malicious user could exploit this vulnerability by sending a crafted synchronization protocol message and causing a denial of service condition in the software.

Scores

CVSS	Score	Vector	Source
3.1	7.5 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	Rockwell

Weaknesses

CWE-20 Improper Input Validation

Affected Products

Product	Versions
ThinManager ThinServerRockwell Automation	11.0.0 - 11.2.6Affected 11.1.0 - 11.1.6Affected 11.2.0 - 11.2.7Affected 12.0.0 - 12.0.5Affected 12.1.0 - 12.1.6Affected 13.0.0 - 13.0.2Affected 13.1.0Affected

References

https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1140471

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.