Medium severity · published Jul 18, 2023
CVE-2023-2913
Rockwell Automation ThinManager ThinServer Path Traversal Vulnerability
6.5
CVSS
2.4%
EPSS
No
On KEV
Description
An executable used in Rockwell Automation ThinManager ThinServer can be configured to enable an API feature in the HTTPS Server Settings. This feature is disabled by default. When the API is enabled and handling requests, a path traversal vulnerability exists that allows a remote actor to leverage the privileges of the server’s file system and read arbitrary files stored in it. A malicious user could exploit this vulnerability by executing a path that contains manipulating variables.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)2.4% · higher than 84% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TT
ThinManager ThinServer · Rockwell Automation
13.0.0 - 13.0.2; 13.1.0 · source: vendor
TH
Thinmanager · Rockwellautomation
13.0.0 through 13.0.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2023-2913
CVE.org
https://www.cve.org/CVERecord?id=CVE-2023-2913
Vendor Advisory
https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1140160
More from ThinManager ThinServer
9.8
CVE-2024-7988
ThinManager® ThinServer™ Information Disclosure and Remote Code Execution Vulnerabilities
9.8
CVE-2024-5989
Rockwell Automation ThinManager® ThinServer™ Improper Input Validation Vulnerability
9.8
CVE-2024-5988
Rockwell Automation ThinManager® ThinServer™ Improper Input Validation Vulnerability
9.8
CVE-2023-2917
Rockwell Automation ThinManager Thinserver Software Vulnerable to Input Validation Vulnerability
9.1
CVE-2023-2915
Rockwell Automation ThinManager Thinserver Software Vulnerable to Input Validation Vulnerability