ThinManager Path Traversal (CVE-2023-27855) Arbitrary File Upload

This module exploits a path traversal vulnerability CVE-2023-27855 in ThinManager use auxiliary/admin/networking/thinmanagertraversalupload msf auxiliarythinmanagertraversalupload show actions ...actions... msf auxiliarythinmanagertraversalupload set ACTION msf auxiliarythinmanagertraversalupload...

Rockwell Automation ThinManager ThinServer Path Traversal File Upload (CVE-2023-27855)

Binary data rockwellthinmanagerthinservercve-2023-27855.nbin...

CVE-2023-27855

creationtimestamp| type| source ---|---|--- 2023-03-22 06:45:28+00:00| seen| https://t.me/cibsecurity/60426 2025-06-04 17:49:24+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/networking/thinmanagertraversalupload.rb 2025-06-05 21:02:22+00:00| seen|...

CVE-2023-27855 Rockwell Automation ThinManager ThinServer Path Traversal Upload

In affected versions, a path traversal exists when processing a message in Rockwell Automation's ThinManager ThinServer. An unauthenticated remote attacker could potentially exploit this vulnerability to upload arbitrary files to any directory on the disk drive where ThinServer.exe is installed...

CVE-2023-27855

CVE-2023-27855 is a path traversal vulnerability in Rockwell Automation ThinManager ThinServer. Affects ThinManager ThinServer versions 13.0.1 and earlier (as per ICS advisory) and can allow an unauthenticated remote attacker to upload arbitrary files to the disk drive where ThinServer.exe is ins...

CVE-2023-27855 Rockwell Automation ThinManager ThinServer Path Traversal Upload

In affected versions, a path traversal exists when processing a message in Rockwell Automation's ThinManager ThinServer. An unauthenticated remote attacker could potentially exploit this vulnerability to upload arbitrary files to any directory on the disk drive where ThinServer.exe is installed...