{"id":"CVE-2023-27855","url":"https://www.cyber-defence.io/tools/cve/CVE-2023-27855","generatedAt":"2026-11-04T23:37:36.669Z","title":"In affected versions, a path traversal exists when processing a message in Rockwell Automation's ThinManager ThinServer.","description":"\nIn affected versions, a path traversal exists when processing a message in Rockwell Automation's ThinManager ThinServer. An unauthenticated remote attacker could potentially exploit this vulnerability to upload arbitrary files to any directory on the disk drive where ThinServer.exe is installed. The attacker could overwrite existing executable files with attacker-controlled, malicious contents, potentially causing remote code execution. \n\n","published":"2023-03-22T00:15:13.000Z","lastModified":"2026-06-17T05:45:58.000Z","status":"Modified","sourceIdentifier":"PSIRT@rockwellautomation.com","cvss":{"version":"3.1","score":9.8,"severity":"CRITICAL","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},"cwe":["CWE-22"],"affected":["rockwellautomation/thinmanager"],"epss":{"score":0.13451,"percentile":0.96437,"date":"2026-11-03","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"urgent","text":"EPSS puts the probability of exploitation in the next 30 days at 13.5%, higher than 96% of all known CVEs. Patch or mitigate before the next change window."},"changes":[],"references":[{"url":"https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1138640","tags":["Permissions Required","Vendor Advisory"],"source":"PSIRT@rockwellautomation.com"},{"url":"https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1138640","tags":["Permissions Required","Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2023-27855","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}