[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fMpTPTob0cv1E-8dRNOnalTeRyTEYUak1CdWa54dwuPE":3,"g5a-risk:CVE-2023-27857":136},{"success":4,"data":5,"meta":133},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":33,"epssPercentile":26,"epssTimeSeries":34,"severity":35,"affectedProducts":36,"affectedProductsCount":45,"references":46,"referencesCount":52,"weaknesses":53,"weaknessesCount":52,"isActivelyExploited":62,"cisaInfo":26,"otxData":26,"relatedBlogPosts":63,"seoMetadata":64,"configurations":89,"relatedVendorCves":117,"notableEvents":118},"CVE-2023-27857","What is CVE-2023-27857?","In affected versions, a heap-based buffer over-read condition occurs when the message field indicates more data than is present in the message field\n\n\n\n in Rockwell Automation's ThinManager ThinServer.  An unauthenticated remote attacker can exploit this vulnerability to crash ThinServer.exe due to a read access violation.","In affected versions, a heap-based buffer over-read condition occurs when the message field indicates more data than is present in the message field in Rockw...","2023-03-22T02:15:48.953","2024-01-09T02:31:27.647",7.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":26,"CVSSMetricV40":26},[16,29],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,3.9,3.6,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":27,"ImpactScore":28},"PSIRT@rockwellautomation.com","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},0.18335,[33,33,33,33,33,33,33],"High",[37,42],{"vendor":38,"product":39,"version":40,"criteria":41,"vulnerable":4},"rockwellautomation","thinmanager","*","cpe:2.3:a:rockwellautomation:thinmanager:*:*:*:*:*:*:*:*",{"vendor":38,"product":39,"version":43,"criteria":44,"vulnerable":4},"13.0.0","cpe:2.3:a:rockwellautomation:thinmanager:13.0.0:*:*:*:*:*:*:*",2,[47],{"url":48,"source":49,"tags":50},"https:\u002F\u002Frockwellautomation.custhelp.com\u002Fapp\u002Fanswers\u002Fanswer_view\u002Fa_id\u002F1138640","Custhelp",[51],"Vendor Advisory",1,[54],{"id":55,"name":56,"description":57,"extendedDescription":58,"status":59,"abstraction":60,"structure":61},"CWE-125","Out-of-bounds Read","The product reads data past the end, or before the beginning, of the intended buffer.","","Draft","Base","Simple",false,[],{"title":65,"metaDescription":66,"keywords":67,"canonicalUrl":68,"structuredData":69},"What is CVE-2023-27857? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2023-27857, a high severity cyber security vulnerability from 2023. In affected versions, a heap-based buffer over-read conditi...","CVE-2023-27857, CVE-2023-27857 vulnerability, CVE-2023-27857 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2023, CVSS score, exploit, patch, remediation, rockwellautomation security, thinmanager vulnerability","\u002Fwhat-is\u002Fcve-2023-27857",{"@context":70,"@type":71,"headline":65,"description":66,"datePublished":10,"dateModified":11,"author":72,"publisher":76,"about":80,"mainEntityOfPage":84,"articleSection":87,"keywords":88},"https:\u002F\u002Fschema.org","TechArticle",{"@type":73,"name":74,"url":75},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":73,"name":74,"url":75,"logo":77},{"@type":78,"url":79},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":81,"name":6,"description":82,"additionalType":83},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":85,"@id":86},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2023-27857","Cybersecurity","CVE-2023-27857, CVE-2023-27857 vulnerability, CVE-2023-27857 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[90],{"Operator":26,"Negate":26,"Nodes":91},[92],{"Operator":93,"Negate":26,"CPEMatch":94},"OR",[95,99,103,107,111,115],{"Vulnerable":4,"Criteria":41,"MatchCriteriaID":96,"VersionStartExcluding":26,"VersionStartIncluding":97,"VersionEndExcluding":98,"VersionEndIncluding":26},"87FE29AC-1AC8-4BEE-9C53-E03F30D8943D","11.0.0","11.0.5",{"Vulnerable":4,"Criteria":41,"MatchCriteriaID":100,"VersionStartExcluding":26,"VersionStartIncluding":101,"VersionEndExcluding":102,"VersionEndIncluding":26},"A2A444C2-A733-48D6-8D60-D7DB93AF7A00","11.1.0","11.1.5",{"Vulnerable":4,"Criteria":41,"MatchCriteriaID":104,"VersionStartExcluding":26,"VersionStartIncluding":105,"VersionEndExcluding":106,"VersionEndIncluding":26},"FC17AE85-2491-4E52-AF74-39A0DE8C7599","11.2.0","11.2.6",{"Vulnerable":4,"Criteria":41,"MatchCriteriaID":108,"VersionStartExcluding":26,"VersionStartIncluding":109,"VersionEndExcluding":110,"VersionEndIncluding":26},"E4E20E28-04AF-4797-8F7C-7406897C078B","12.0.0","12.0.3",{"Vulnerable":4,"Criteria":41,"MatchCriteriaID":112,"VersionStartExcluding":26,"VersionStartIncluding":113,"VersionEndExcluding":114,"VersionEndIncluding":26},"681995A2-01BD-4ADA-A6B4-256E9EA73591","12.1.0","12.1.4",{"Vulnerable":4,"Criteria":44,"MatchCriteriaID":116,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"D7FA8090-F7EB-4C5D-AD9D-7D82F34F34D1",[],[119,126],{"id":120,"eventType":121,"eventTime":122,"details":123,"label":124,"color":125},"17f30fb8-3281-4b49-af96-ffcb1178c2a4","HIGH_EPSS_DELTA","2025-06-11T10:10:20.338739+00:00","Daily EPSS score increased by 0.251 on 2023-12-30","EPSS Score Increased","red",{"id":127,"eventType":128,"eventTime":129,"details":130,"label":131,"color":132},"62f91741-973a-4c5d-8cd9-aaf09657f11b","LOW_EPSS_DELTA","2025-11-19T04:05:20.158064+00:00","Daily EPSS score decreased by 0.206 on 2023-12-30","EPSS Score Decreased","green",{"lastModified":11,"cacheTime":134,"version":135},1792344962664,"2.0",{"score":137,"band":138,"action":139,"scoredAt":140},48,"Medium","Plan remediation","2026-10-16T06:57:29.24448+00:00"]