PT-2025-15451 · Rockwell Automation · Rockwell Automation Arena
CVSS v4.0
8.5
High
| Vector | AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
Name of the Vulnerable Software and Affected Versions:
Rockwell Automation Arena (affected versions not specified)
Description:
A local code execution issue exists due to improper validation of user-supplied data, allowing a threat actor to write outside of the allocated memory buffer. If exploited, this can lead to information disclosure and execution of arbitrary code on the system. The issue can be triggered by opening a malicious DOE file.
Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Memory Corruption
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Rockwell Automation Arena