Rockwell Automation ThinManager ThinServer

1. EXECUTIVE SUMMARY CVSS v3 8.1 ATTENTION: Exploitable remotely Vendor: Rockwell Automation Equipment: ThinManager ThinServer Vulnerability: Heap-based Buffer Overflow 2. RISK EVALUATION Successful exploitation of this vulnerability could lead to the software crashing; a buffer overflow...

CVE-2022-38742

CVE-2022-38742 affects Rockwell Automation’s ThinManager ThinServer . A heap-based buffer overflow exists in the handling of certain TFTP/HTTPS requests, potentially crashing ThinServer and enabling arbitrary remote code execution. Affected versions include ThinServer 11.0.0 through 13.0.0 (per C...