CVE-2025-11918
- EPSS 0%
- Veröffentlicht 14.11.2025 13:28:39
- Zuletzt bearbeitet 17.11.2025 17:48:50
Rockwell Automation Arena® suffers from a stack-based buffer overflow vulnerability. The specific flaw exists within the parsing of DOE files. Local attackers are able to exploit this issue to potentially execute arbitrary code on affected installati...
CVE-2025-7033
- EPSS 0.04%
- Veröffentlicht 05.08.2025 13:42:37
- Zuletzt bearbeitet 07.08.2025 14:32:27
A memory abuse issue exists in the Rockwell Automation Arena® Simulation. A custom file can force Arena Simulation to read and write past the end of memory space. Successful use requires user action, such as opening a bad file or webpage. If used, a ...
CVE-2025-7032
- EPSS 0.04%
- Veröffentlicht 05.08.2025 13:39:32
- Zuletzt bearbeitet 07.08.2025 14:32:17
A memory abuse issue exists in the Rockwell Automation Arena® Simulation. A custom file can force Arena Simulation to read and write past the end of memory space. Successful use requires user action, such as opening a bad file or webpage. If used, a ...
CVE-2025-7025
- EPSS 0.04%
- Veröffentlicht 05.08.2025 13:37:17
- Zuletzt bearbeitet 07.08.2025 14:31:58
A memory abuse issue exists in the Rockwell Automation Arena® Simulation. A custom file can force Arena Simulation to read and write past the end of memory space. Successful use requires user action, such as opening a bad file or webpage. If used, a ...
CVE-2025-6376
- EPSS 0.03%
- Veröffentlicht 09.07.2025 20:13:45
- Zuletzt bearbeitet 11.07.2025 18:35:53
A remote code execution security issue exists in the Rockwell Automation Arena®. A crafted DOE file can force Arena Simulation to write beyond the boundaries of an allocated object. Exploitation requires user interaction, such as opening a malicious...
CVE-2025-6377
- EPSS 0.03%
- Veröffentlicht 09.07.2025 20:12:47
- Zuletzt bearbeitet 11.07.2025 18:34:12
A remote code execution security issue exists in the Rockwell Automation Arena®. A crafted DOE file can force Arena Simulation to write beyond the boundaries of an allocated object. Exploitation requires user interaction, such as opening a malicious...
CVE-2025-3289
- EPSS 0.03%
- Veröffentlicht 08.04.2025 15:34:20
- Zuletzt bearbeitet 14.07.2025 18:56:09
A local code execution vulnerability exists in the Rockwell Automation Arena® due to a stack-based memory buffer overflow. The flaw is result of improper validation of user-supplied data. If exploited a threat actor can disclose information and execu...
CVE-2025-3288
- EPSS 0.03%
- Veröffentlicht 08.04.2025 15:30:31
- Zuletzt bearbeitet 14.07.2025 19:13:20
A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat actor being able to read outside of the allocated memory buffer. The flaw is a result of improper validation of user-supplied data. If exploited a threat a...
CVE-2025-3287
- EPSS 0.03%
- Veröffentlicht 08.04.2025 15:29:45
- Zuletzt bearbeitet 14.07.2025 19:13:28
A local code execution vulnerability exists in the Rockwell Automation Arena® due to a stack-based memory buffer overflow. The flaw is result of improper validation of user-supplied data. If exploited a threat actor can disclose information and execu...
CVE-2025-3286
- EPSS 0.03%
- Veröffentlicht 08.04.2025 15:28:21
- Zuletzt bearbeitet 14.07.2025 19:13:40
A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat actor being able to read outside of the allocated memory buffer. The flaw is a result of improper validation of user-supplied data. If exploited a threat a...