CVE-2023-27856— Rockwell Automation ThinManager ThinServer Path Traversal Download
Quick assessment
Affected
Rockwell Automation ThinManager ThinServer
Exploitation
High exploitation probability; assess promptly
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Rockwell Automation ThinManager是美国罗克韦尔（Rockwell Automation）公司的一款瘦客户端管理软件。允许将瘦客户端同时分配给多个远程桌面服务器。 Rockwell Automation ThinManager ThinServer存在路径遍历漏洞，该漏洞源于存在路径遍历漏洞，未经身份验证的远程攻击者利用该漏洞可以在磁盘驱动器上下载任意文件。
Public Exploits 1
Metasploit · 1
thinmanager_traversal_download.rb [auxiliary]
Possible ATT&CK Techniques 1 AI
T1005 · Data from Local System
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2023-27856
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Rockwell Automation ThinManager ThinServer Path Traversal Download
Source: CVE Program / CVE List V5
Vulnerability Description
In affected versions, path traversal exists when processing a message of type 8
in Rockwell Automation's ThinManager ThinServer.
An unauthenticated remote attacker can exploit this vulnerability to download arbitrary files on the disk drive where ThinServer.exe is installed.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
对路径名的限制不恰当(路径遍历)
Source: CVE Program / CVE List V5
Vulnerability Title
Rockwell Automation ThinManager 路径遍历漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Rockwell Automation ThinManager是美国罗克韦尔（Rockwell Automation）公司的一款瘦客户端管理软件。允许将瘦客户端同时分配给多个远程桌面服务器。 Rockwell Automation ThinManager ThinServer存在路径遍历漏洞，该漏洞源于存在路径遍历漏洞，未经身份验证的远程攻击者利用该漏洞可以在磁盘驱动器上下载任意文件。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Rockwell Automation | ThinManager ThinServer | 6.x - 10.x | - |
|
II. Public POCs for CVE-2023-27856
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2023-27856
请登录查看更多情报信息。
Other References for CVE-2023-27856 (1)
IV. Related Vulnerabilities
Same product: ThinManager ThinServer
-
CVE-2023-2917
Rockwell Automation ThinManager Thinserver Software Vulnerab -
CVE-2023-2915
Rockwell Automation ThinManager Thinserver Software Vulnerab -
CVE-2023-2914
Rockwell Automation ThinManager Thinserver Software Vulnerab -
CVE-2023-2913
Rockwell Automation ThinManager ThinServer Path Traversal Vu -
CVE-2023-27857
Rockwell Automation ThinManager ThinServer Heap-Based Buffer
Same vendor: Rockwell Automation
-
CVE-2026-12656
1732E ArmorBlock® - Multiple Vulnerabilities -
CVE-2026-12655
1732E ArmorBlock® - Multiple Vulnerabilities -
CVE-2026-6071
Code Execution Vulnerability in Arena® -
CVE-2024-7956
Sensitive Data Exposure and Escalating Privileges Vulnerabil -
CVE-2024-7953
DataEdgePlatform DataMosaix™ Private Cloud
Same weakness: CWE-22
-
CVE-2026-103820
CAI Content Credentials | Improper Limitation of a Pathname -
CVE-2026-90530
ColdFusion | Improper Limitation of a Pathname to a Restrict -
CVE-2026-79715
IBM WebSphere Application Server Liberty Path Traversal -
CVE-2026-63162
Omnispace Agora Project < 26.10.0 Path Traversal via tmpFold -
CVE-2026-106634
Adobe Experience Manager | Improper Limitation of a Pathname
V. Comments for CVE-2023-27856
No comments yet