CVE-2023-2913: An executable used in Rockwell Automation ThinManager ThinServer can be configured to enable an API feature in the HTTPS Server Settings. This feature is…

PriorityP342medium6.5CVSS 3.1

AVNACLPRLUINSUCHINAN

EPSS

1.27%

66.1th percentile

An executable used in Rockwell Automation ThinManager ThinServer can be configured to enable an API feature in the HTTPS Server Settings. This feature is disabled by default. When the API is enabled and handling requests, a path traversal vulnerability exists that allows a remote actor to leverage the privileges of the server’s file system and read arbitrary files stored in it. A malicious user could exploit this vulnerability by executing a path that contains manipulating variables.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
rockwell_automation	thinmanager_thinserver	—	—
rockwell_automation	thinmanager_thinserver	—	—
rockwellautomation	thinmanager	13.0.0 – 13.0.2	—

CVSS provenance

nvdv3.16.5MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

vendor_redhat5.5MEDIUM

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.