21786 matches found
CVE-2024-12130 Rockwell Automation Arena® Out of Bounds Read Vulnerability
An “out of bounds read” code execution vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to craft a DOE file and force the software to read beyond the boundaries of an allocated memory. If exploited, a threat actor could leverage this vulnerability to execute...
CVE-2024-12130
CVE-2024-12130 is a Rockwell Automation Arena (Arena Simulation) vulnerability described as an out-of-bounds read during parsing of DOE files, enabling arbitrary code execution when a user opens a malicious DOE file or visits a crafted resource. Documents consistently reference Arena/ Arena Simul...
CVE-2024-12130 Rockwell Automation Arena® Out of Bounds Read Vulnerability
An “out of bounds read” code execution vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to craft a DOE file and force the software to read beyond the boundaries of an allocated memory. If exploited, a threat actor could leverage this vulnerability to execute...
CVE-2024-11158 Rockwell Automation Arena® Uninitialized Vulnerability
An “uninitialized variable” code execution vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to craft a DOE file and force the software to access a variable before it being initialized. If exploited, a threat actor could leverage this vulnerability to execute...
CVE-2024-11158 Rockwell Automation Arena® Uninitialized Vulnerability
An “uninitialized variable” code execution vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to craft a DOE file and force the software to access a variable before it being initialized. If exploited, a threat actor could leverage this vulnerability to execute...
CVE-2024-11158
Rockwell Automation Arena (including Arena Simulation) is reported to have an uninitialized variable vulnerability in DOE file parsing that can lead to remote arbitrary code execution when a user runs malicious DOE content. The flaw, described across CVE-2024-11158 entries, requires that the atta...
CVE-2024-11156 Rockwell Automation Arena® Out of Bounds Write Vulnerability
An “out of bounds write” code execution vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to write beyond the boundaries of allocated memory in a DOE file. If exploited, a threat actor could leverage this vulnerability to execute arbitrary code. To exploit thi...
CVE-2024-11156
Rockwell Automation Arena (and Arena Simulation) is affected by a DOE-file parsing out-of-bounds write that can lead to remote/local arbitrary code execution when a user opens a crafted DOE file. Exploitation requires user interaction (e.g., opening a malicious file/page). Several connected advis...
CVE-2024-11156 Rockwell Automation Arena® Out of Bounds Write Vulnerability
An “out of bounds write” code execution vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to write beyond the boundaries of allocated memory in a DOE file. If exploited, a threat actor could leverage this vulnerability to execute arbitrary code. To exploit thi...
CVE-2024-11155 Rockwell Automation Arena® Use After Free Vulnerability
A “use after free” code execution vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to craft a DOE file and force the software to use a resource that was already used. If exploited, a threat actor could leverage this vulnerability to execute arbitrary code. To...
CVE-2024-11155 Rockwell Automation Arena® Use After Free Vulnerability
A “use after free” code execution vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to craft a DOE file and force the software to use a resource that was already used. If exploited, a threat actor could leverage this vulnerability to execute arbitrary code. To...
CVE-2024-11155
Rockwell Automation Arena contains a use-after-free vulnerability in parsing DOE files that could allow an attacker to execute arbitrary code. The issue affects Arena versions prior to 16.20.06 (per Nessus and related advisories). Exploitation requires a legitimate user to run the malicious DOE c...
CVE-2024-11155: Use After Free
A “use after free” code execution vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to craft a DOE file and force the software to use a resource that was already used. If exploited, a threat actor could leverage this vulnerability to execute arbitrary code. To...
CVE-2024-12130: Out-of-bounds Read
An “out of bounds read” code execution vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to craft a DOE file and force the software to read beyond the boundaries of an allocated memory. If exploited, a threat actor could leverage this vulnerability to execute...
Rockwell Automation Arena 安全漏洞
Rockwell Automation Arena is a discrete event simulation and automation software from Rockwell Automation USA. A security vulnerability exists in Rockwell Automation Arena version 16.20.00 and prior versions that stems from the presence of an uninitialized variable code execution vulnerability th...
PT-2024-17453
Name of the Vulnerable Software and Affected Versions Rockwell Automation Arena affected versions not specified Description An "out of bounds read" code execution issue exists in Rockwell Automation Arena that could allow a threat actor to craft a DOE file and force the software to read beyond th...
CVE-2024-11158: Improper Initialization
An “uninitialized variable” code execution vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to craft a DOE file and force the software to access a variable before it being initialized. If exploited, a threat actor could leverage this vulnerability to execute...
CVE-2024-11156: Out-of-bounds Write
An “out of bounds write” code execution vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to write beyond the boundaries of allocated memory in a DOE file. If exploited, a threat actor could leverage this vulnerability to execute arbitrary code. To exploit thi...
