220 matches found
CVE-2026-8314
A security issue exists within Arena® Simulation due to a memory corruption vulnerability in the siman.exe Siman component. The vulnerability stems from improper validation of user-supplied data, which can result in an out-of-bounds write. An attacker could leverage this vulnerability to execute...
CVE-2026-8085
A security issue exists within Arena® Simulation due to a memory corruption vulnerability in the model.exe Siman component. The vulnerability stems from improper validation of user-supplied data, which can result in an out-of-bounds write. An attacker could leverage this vulnerability to execute...
CVE-2026-8312
A security issue exists within Arena® Simulation due to a memory corruption vulnerability in the expmt.exe Siman component. The vulnerability stems from improper validation of user-supplied data, which can result in an out-of-bounds write. An attacker could leverage this vulnerability to execute...
CVE-2026-8313
A security issue exists within Arena® Simulation due to a memory corruption vulnerability in the linker.exe Siman component. The vulnerability stems from improper validation of user-supplied data, which can result in an out-of-bounds write. An attacker could leverage this vulnerability to execute...
CVE-2026-8314
CVE-2026-8314 affects Rockwell Automation Arena Simulation’s siman.exe component. The issue is a memory corruption/out-of-bounds write caused by inadequate validation of user-supplied data, enabling code execution in the user’s context when a malicious file is opened. The CVSS v4.0 score is 7.0 (...
CVE-2026-8312
The CVE-2026-8312 entry concerns Arena® Simulation’s expmt.exe (Siman) component. It describes a memory corruption vulnerability caused by improper validation of user-supplied data, leading to an out-of-bounds write. The documented impact is arbitrary code execution in the context of the current ...
CVE-2026-8085
The CVE concerns Arena® Simulation, specifically memory corruption in the model.exe (Siman) component caused by improper validation of user-supplied data, leading to an out-of-bounds write. Exploitation could allow arbitrary code execution in the context of the current process when a user opens a...
PT-2026-58022
Name of the Vulnerable Software and Affected Versions Arena Simulation affected versions not specified Description A memory corruption issue exists in the siman.exe Siman component. The flaw is caused by improper validation of user-supplied data, leading to an out-of-bounds write, which occurs wh...
PT-2026-58020
Name of the Vulnerable Software and Affected Versions Arena Simulation affected versions not specified Description A memory corruption issue exists in the expmt.exe Siman component. The flaw is caused by improper validation of user-supplied data, leading to an out-of-bounds write, which occurs wh...
PT-2026-58019
Name of the Vulnerable Software and Affected Versions Arena Simulation affected versions not specified Description An issue exists in the model.exe Siman component where improper validation of user-supplied data leads to memory corruption via an out-of-bounds write. This occurs when the software...
The vulnerability of the Rockwell Automation Arena Simulation software for simulating and automating discrete events lies in buffer overflows in the stack. This allows a hacker to execute arbitrary code.
The vulnerability of the Rockwell Automation Arena Simulation software for simulating and automating discrete events is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to execute arbitrary code using specially created DOE files...
CISA Releases Seven Industrial Control Systems Advisories
CISA released seven Industrial Control Systems ICS Advisories. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-329-01 Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, Cobalt Share ICSA-25-329-02 Rockwell Automation Aren...
CVE-2025-11918
The CVE-2025-11918 entry describes a stack-based buffer overflow in Rockwell Automation Arena® related to parsing DOE files. The vulnerability is local-only: a local attacker can trigger arbitrary code execution by opening a malicious DOE file on affected Arena installations. The connected source...
EUVD-2019-4974
Malware in sbrugna...
EUVD-2019-4966
Malware in sbrugna...
EUVD-2019-4965
Malware in sbrugna...
EUVD-2019-4976
Malware in sbrugna...
EUVD-2018-20451
Malware in sbrugna...