CVE-2025-3287

Name of the Vulnerable Software and Affected Versions: Rockwell Automation Arena (affected versions not specified)

Description: A local code execution issue exists due to a stack-based memory buffer overflow. This is caused by improper validation of user-supplied data. If exploited, it can lead to information disclosure and arbitrary code execution on the system. Exploitation requires a legitimate user to open a malicious DOE file.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.