Security Researchers

**Name of the Vulnerable Software and Affected Versions** ibaPDA (affected versions not specified) ibaDatCoordinator (affected versions not specified) **Description** Remote, unauthenticated attackers can exploit a deserialization of untrusted data issue to achieve remote code execution, potentially gaining full access to the affected systems. Deserialization is the process of converting a data stream back into an object, which, when handled insecurely, allows attackers to execute arbitrary code. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Rockwell Automation's ThinManager ThinServer (affected versions not specified) **Description** A path traversal issue exists when processing a message in Rockwell Automation's ThinManager ThinServer. An unauthenticated remote attacker could potentially exploit this to upload arbitrary files to any directory on the disk drive where ThinServer.exe is installed. The attacker could overwrite existing executable files with attacker-controlled, malicious contents, potentially causing remote code execution. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Rockwell Automation's ThinManager ThinServer (affected versions not specified) **Description** Path traversal exists when processing a message of type 8 in Rockwell Automation's ThinManager ThinServer. An unauthenticated remote attacker can exploit this issue to download arbitrary files on the disk drive where ThinServer.exe is installed. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Rockwell Automation's ThinManager ThinServer (affected versions not specified) **Description** A heap-based buffer over-read condition occurs when the message field indicates more data than is present in the message field. An unauthenticated remote attacker can exploit this issue to crash ThinServer.exe due to a read access violation. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.