CVE-2023-2914

Name of the Vulnerable Software and Affected Versions Rockwell Automation ThinManager ThinServer (affected versions not specified)

Description The issue exists due to insufficient input validation in the Rockwell Automation ThinManager ThinServer component. This allows a remote attacker to cause a denial of service condition by sending a crafted synchronization protocol message, resulting in a read access violation that terminates the process. An integer overflow condition exists in the affected products when processing incoming messages.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.