CVE-2025-3286

Name of the Vulnerable Software and Affected Versions: Rockwell Automation Arena (affected versions not specified)

Description: A local code execution issue exists due to improper validation of user-supplied data, allowing a threat actor to read outside the allocated memory buffer. If exploited, this can lead to information disclosure and arbitrary code execution on the system. The vulnerability can be exploited when a legitimate user opens a malicious DOE file.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.