CVE-2022-38742: rockwell automation thinmanager thinserver Heap-based Buffer Overflow
Vulnerability summary
CVE-2022-38742 is a critical (CVSS 9.8) Heap-based Buffer Overflow vulnerability in rockwell automation thinmanager thinserver. EPSS estimates a 22.73% chance of exploitation in the next 30 days, higher than 97.7% of scored vulnerabilities.
Timeline
- 23-09-2022PublishedVulnerability first disclosed.
- 22-05-2025Last modifiedVulnerability information updated.
Description
Rockwell Automation ThinManager ThinServer versions 11.0.0 - 13.0.0 is vulnerable to a heap-based buffer overflow. An attacker could send a specifically crafted TFTP or HTTPS request, causing a heap-based buffer overflow that crashes the ThinServer process. If successfully exploited, this could expose the server to arbitrary remote code execution.
CVSS metrics
2 scores · 2 sources · 1 version- CVE.orgCNA8.1HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:HDiffers
EPSS trend
Probability
22.73%
Chance of exploitation in the next 30 days
Percentile
98%
Versus all other CVEs
30-day change
+0.49 pp
From 22.24% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root cause- CWE-122Heap-based Buffer OverflowA heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().
- CWE-787Out-of-bounds WriteThe product writes data past the end, or before the beginning, of the intended buffer.
Affected systems
Rockwell automation1 product
- thinmanager thinserver≥ 11.0.0, ≤ 13.0.0
Rockwellautomation1 product
- thinmanager≥ 11.0.0, ≤ 13.0.0
2 vendors · 2 products
References
1 links- rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1136847X Refsource MISCPermissions RequiredVendor Advisory