Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-rvg5-w7ph-h5wx

Опубликовано: 25 сент. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

Rockwell Automation ThinManager ThinServer versions 11.0.0 - 13.0.0 is vulnerable to a heap-based buffer overflow. An attacker could send a specifically crafted TFTP or HTTPS request, causing a heap-based buffer overflow that crashes the ThinServer process. If successfully exploited, this could expose the server to arbitrary remote code execution.

Rockwell Automation ThinManager ThinServer versions 11.0.0 - 13.0.0 is vulnerable to a heap-based buffer overflow. An attacker could send a specifically crafted TFTP or HTTPS request, causing a heap-based buffer overflow that crashes the ThinServer process. If successfully exploited, this could expose the server to arbitrary remote code execution.

EPSS

Процентиль: 97%
0.3468
Средний

9.8 Critical

CVSS3

Дефекты

CWE-787

Связанные уязвимости

CVSS3: 8.1
nvd
больше 3 лет назад

Rockwell Automation ThinManager ThinServer versions 11.0.0 - 13.0.0 is vulnerable to a heap-based buffer overflow. An attacker could send a specifically crafted TFTP or HTTPS request, causing a heap-based buffer overflow that crashes the ThinServer process. If successfully exploited, this could expose the server to arbitrary remote code execution.

CVSS3: 8.1
fstec
больше 3 лет назад

Уязвимость компонента ThinServer платформы для централизованного управления приложениямия Rockwell Automation ThinManager, позволяющая нарушителю выполнить произвольный код или вызвать отказ в обслуживании

EPSS

Процентиль: 97%
0.3468
Средний

9.8 Critical

CVSS3

Дефекты

CWE-787