Weak Cipher Implementation in Rockwell Automation's ThinManager Product

CVE-2023-2443

Summary

The ThinManager product by Rockwell Automation has a vulnerability that permits the use of medium strength ciphers. If an attacker manipulates the client to request an insecure cipher, they may gain the ability to decrypt sensitive traffic exchanged between the client and the server API. This weakness can enable malicious actors to intercept and access confidential information, calling for immediate attention and remediation.

References