CVE-2022-38742 is a critical heap-based buffer overflow vulnerability affecting Rockwell Automation ThinManager ThinServer versions 11.0.0 through 13.0.0. An unauthenticated attacker can exploit this by sending specially crafted TFTP or HTTPS requests, leading to a server crash and potential arbitrary remote code execution. With a CVSS score of 9.8 (CRITICAL) and an EPSS score indicating higher exploitability than 96% of CVEs, this vulnerability poses a significant risk. While no public exploit code or active exploitation has been observed, and community discussion is minimal, its high severity warrants immediate attention.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= 11.0.0, <= 13.0.0CPE match | cpe:2.3:a:rockwellautomation:thinmanager_thinserver:*:*:*:*:*:*:*:* | ||
>= 11.0.0, <= 13.0.0CPE matchmatch criteria | cpe:2.3:a:rockwellautomation:thinmanager:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.