Rockwell Automation Arena

🗓️ 26 Oct 2023 06:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics🔗 www.cisa.gov👁 38 Views

Rockwell Automation Arena version 16.20. Software vulnerabilities include Out-of-Bounds Read and Access of Uninitialized Pointer. Upgrading to version 16.20.01 recommended

Reporter	Title	Published	Views	Family All 23
BDU FSTEC	The vulnerability of software for discrete event simulation and automation in Rockwell Automation Arena lies in the ability to read data beyond the buffer in memory, allowing an attacker to execute arbitrary code.	1 Nov 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of software for discrete event simulation and automation in Rockwell Automation Arena lies in the use of an uninitialized pointer, which allows a hacker to execute arbitrary code.	1 Nov 202300:00	–	bdu_fstec
Circl	CVE-2023-27854	27 Oct 202322:17	–	circl
Circl	CVE-2023-27858	27 Oct 202322:17	–	circl
CNNVD	Rockwell Automation Arena Simulation Software 缓冲区错误漏洞	27 Oct 202300:00	–	cnnvd
CNNVD	Rockwell Automation Arena Simulation Software 缓冲区错误漏洞	27 Oct 202300:00	–	cnnvd
CNVD	Rockwell Automation Arena Simulation Software Buffer Overflow Vulnerability (CNVD-2024-30639)	31 Oct 202300:00	–	cnvd
CNVD	Rockwell Automation Arena Simulation Software Buffer Overflow Vulnerability (CNVD-2025-06476)	31 Oct 202300:00	–	cnvd
CVE	CVE-2023-27854	27 Oct 202318:51	–	cve
CVE	CVE-2023-27858	27 Oct 202318:58	–	cve

Source	Link
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2023/icsa-23-299-04.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-23-299-04
cisa	www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
cisa	www.cisa.gov/resources-tools/resources/ics-recommended-practices
cisa	www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
cisa	www.cisa.gov/topics/industrial-control-systems
cisa	www.cisa.gov/uscert/sites/default/files/publications/emailscams0905.pdf
cisa	www.cisa.gov/uscert/ncas/tips/ST04-014
us-cert	www.us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
cisa	www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B

26 Oct 2023 06:00Current

8.3High risk

Vulners AI Score8.3

CVSS 3.17.8

EPSS0.00075

SSVC