Rockwell Automation ThinManager 13.0.1

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:rockwellautomation:thinmanager:13.0.1:*:*:*:*:*:*:*

part: a version: 13.0.1 update: *

VendorRockwellautomation (483fb14e-bfe0-5dc5-b460-aca202063cba)
ProductThinmanager (bf0d695b-1c42-563b-a699-fa75614cac56)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-27856 vulnerable 2026-06-08 05:57:42.325159 Rockwell Automation ThinManager ThinServer Path Traversal Download
HIGH (7.5)
In affected versions, path traversal exists when processing a message of type 8 in Rockwell Automation's ThinManager ThinServer. An unauthenticated remote attacker can exploit this vulnerability to download arbitrary files on the disk drive where ThinServer.exe is installed.
Published: 2023-03-21T23:55:23.665Z
Updated: 2025-02-25T21:22:03.982Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-27855 vulnerable 2026-06-08 05:57:42.324572 Rockwell Automation ThinManager ThinServer Path Traversal Upload
CRITICAL (9.8)
In affected versions, a path traversal exists when processing a message in Rockwell Automation's ThinManager ThinServer. An unauthenticated remote attacker could potentially exploit this vulnerability to upload arbitrary files to any directory on the disk drive where ThinServer.exe is installed. The attacker could overwrite existing executable files with attacker-controlled, malicious contents, potentially causing remote code execution.
Published: 2023-03-21T23:48:11.750Z
Updated: 2025-02-25T20:21:14.120Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.