{"id":"CVE-2023-27855","aliases":["EUVD-2023-31590","GHSA-pp6m-q8hc-23jj"],"status":"published","title":"Rockwell Automation ThinManager ThinServer Path Traversal Upload","description":"In affected versions, a path traversal exists when processing a message in Rockwell Automation's ThinManager ThinServer. An unauthenticated remote attacker could potentially exploit this vulnerability to upload arbitrary files to any directory on the disk drive where ThinServer.exe is installed. The attacker could overwrite existing executable files with attacker-controlled, malicious contents, potentially causing remote code execution.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.13451,"percentile":0.96463,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-22"],"published":"2023-03-21T23:48:11Z","modified":"2026-06-17T05:45:58Z","exploits":[{"source":"metasploit","id":"auxiliary/admin/networking/thinmanager_traversal_upload","title":"ThinManager Path Traversal (CVE-2023-27855) Arbitrary File Upload","type":"auxiliary","date":"2023-04-05","verified":true,"url":"https://www.rapid7.com/db/modules/auxiliary/admin/networking/thinmanager_traversal_upload"}],"products":[{"vendor":"rockwell automation","product":"thinmanager thinserver"},{"vendor":"rockwellautomation","product":"thinmanager"}],"references":[{"url":"https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1138640","tags":["x_transferred","Permissions Required","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-27855"},{"url":"https://github.com/advisories/GHSA-pp6m-q8hc-23jj"}],"sources":{"cve":[{"id":"CVE-2023-27855","title":"Rockwell Automation ThinManager ThinServer Path Traversal Upload","description":"\nIn affected versions, a path traversal exists when processing a message in Rockwell Automation's ThinManager ThinServer. An unauthenticated remote attacker could potentially exploit this vulnerability to upload arbitrary files to any directory on the disk drive where ThinServer.exe is installed. The attacker could overwrite existing executable files with attacker-controlled, malicious contents, potentially causing remote code execution. \n\n","status":"published","published":"2023-03-21T23:48:11.75Z","modified":"2025-02-25T20:21:14.12Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"cna"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:35:26.63732Z"}],"euvd":[{"id":"EUVD-2023-31590","description":"\nIn affected versions, a path traversal exists when processing a message in Rockwell Automation's ThinManager ThinServer. An unauthenticated remote attacker could potentially exploit this vulnerability to upload arbitrary files to any directory on the disk drive where ThinServer.exe is installed. The attacker could overwrite existing executable files with attacker-controlled, malicious contents, potentially causing remote code execution. \n\n","status":"published","published":"2023-03-21T23:48:11Z","modified":"2025-02-25T20:21:14Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T20:53:23.677257Z"}],"ghsa":[{"id":"GHSA-pp6m-q8hc-23jj","title":"A path traversal exists when processing a message in Rockwell Automation's ThinManager ThinServer...","description":"A path traversal exists when processing a message in Rockwell Automation's ThinManager ThinServer. An unauthenticated remote attacker could potentially exploit this vulnerability to upload arbitrary files to any directory on the disk drive where ThinServer.exe is installed. The attacker could overwrite existing executable files with attacker-controlled, malicious contents, potentially causing remote code execution.","status":"published","published":"2023-03-22T00:30:20Z","modified":"2023-04-01T05:07:09Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:54:26.249885Z"}],"nvd":[{"id":"CVE-2023-27855","description":"\nIn affected versions, a path traversal exists when processing a message in Rockwell Automation's ThinManager ThinServer. An unauthenticated remote attacker could potentially exploit this vulnerability to upload arbitrary files to any directory on the disk drive where ThinServer.exe is installed. The attacker could overwrite existing executable files with attacker-controlled, malicious contents, potentially causing remote code execution. \n\n","status":"published","published":"2023-03-22T00:15:12.67Z","modified":"2026-06-17T05:45:58.353Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:07:50.908252Z"}]}}