| Reporter | Title | Published | Views | Family All 15 |
|---|---|---|---|---|
 | The vulnerability of the ThinServer component of the Rockwell Automation ThinManager application management platform allows a attacker to execute arbitrary code. | 21 Aug 202300:00 | – | bdu_fstec |
 | CVE-2023-2917 | 17 Aug 202320:37 | – | circl |
 | Rockwell Automation ThinManager 路径遍历漏洞 | 17 Aug 202300:00 | – | cnnvd |
 | Rockwell Automation ThinManager Path Traversal Vulnerability (CNVD-2023-64278) | 19 Aug 202300:00 | – | cnvd |
 | CVE-2023-2917 Rockwell Automation ThinManager Thinserver Software Vulnerable to Input Validation Vulnerability | 17 Aug 202315:10 | – | cvelist |
 | Rockwell Automation ThinManager ThinServer | 22 Aug 202306:00 | – | ics |
 | ThinManager Path Traversal (CVE-2023-2917) Arbitrary File Upload | 17 Aug 202300:00 | – | metasploit |
 | CVE-2023-2917 | 17 Aug 202316:15 | – | nvd |
 | CVE-2023-2917 | 17 Aug 202316:15 | – | osv |
 | Path traversal | 17 Aug 202316:15 | – | prion |
10
Node
OR
[
{
"defaultStatus": "unaffected",
"product": "ThinManager ThinServer",
"vendor": "Rockwell Automation",
"versions": [
{
"status": "affected",
"version": "11.0.0 - 11.2.6"
},
{
"status": "affected",
"version": "11.1.0 - 11.1.6"
},
{
"status": "affected",
"version": "11.2.0 - 11.2.7"
},
{
"status": "affected",
"version": "12.0.0 - 12.0.5"
},
{
"status": "affected",
"version": "12.1.0 - 12.1.6"
},
{
"status": "affected",
"version": "13.0.0 - 13.0.2"
},
{
"status": "affected",
"version": "13.1.0"
}
]
}
]| Source | Link |
|---|---|
| rockwellautomation | www.rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1140471 |
| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| DEPTH | path | /Program Files/Rockwell Software/ThinManager/payload.exe | Path traversal via the filename field enabling arbitrary file upload to the target system (CVE-2023-2917). | CWE-20, CWE-22 |
| RFILE | path | /Program Files/Rockwell Software/ThinManager/payload.exe | Path traversal via the filename field enabling arbitrary file upload to the target system (CVE-2023-2917). | CWE-20, CWE-22 |
| LFILE | path | /Program Files/Rockwell Software/ThinManager/payload.exe | Path traversal via the filename field enabling arbitrary file upload to the target system (CVE-2023-2917). | CWE-20, CWE-22 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
17 Jun 2026 05:53Current
8.6High risk
Vulners AI Score8.6
CVSS 3.19.8
EPSS0.72173
SSVC