Lucene search
+L

220 matches found

Zero Day Initiative
Zero Day Initiative
added 2024/12/10 12:00 a.m.13 views

Rockwell Automation Arena Simulation DOE File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Rockwell Automation Arena Simulation. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

7.8CVSS7.8AI score0.00244EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2024/04/02 12:00 a.m.12 views

The software for simulation and automation of discrete events in Arena Simulation is vulnerable due to an operation that goes beyond the buffer in memory, allowing attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Arena Simulation software for modeling and automating discrete events arises from the execution of an operation outside the buffer in memory. Exploiting this vulnerability can allow a hacker to compromise the confidentiality, integrity, and accessibility of the protected...

7.8CVSS5.9AI score0.00349EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/04/02 12:00 a.m.14 views

The vulnerability of the Arena Simulation software in simulating and automating discrete events lies in its ability to read data beyond the specified buffer limit. This allows attackers to disclose sensitive information or cause the application to terminate abnormally.

The vulnerability of the Arena Simulation software for modeling and automating discrete events lies in the ability to read data beyond the specified buffer. Exploiting this vulnerability can allow an attacker to disclose sensitive information or cause the application to terminate abnormally using...

7.8CVSS5.4AI score0.0022EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/04/02 12:00 a.m.14 views

The vulnerability of the Arena Simulation software in terms of modeling and automating discrete events lies in its memory management after it is freed. This allows a hacker to execute arbitrary code.

The vulnerability of the Arena Simulation software for modeling and automating discrete events lies in the use of memory after it is freed. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

7.8CVSS5.9AI score0.00232EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/04/02 12:00 a.m.12 views

The software’s vulnerability for simulating and automating discrete events in Arena Simulation arises from buffer overflows, allowing intruders to execute arbitrary code and compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Arena Simulation software for modeling and automating discrete events arises from buffer overflows. Exploiting this vulnerability allows an attacker to execute arbitrary code and compromise the confidentiality, integrity, and accessibility of the protected information...

7.8CVSS6.2AI score0.00236EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/04/02 12:00 a.m.30 views

The vulnerability of the Arena Simulation software for modeling and automating discrete events lies in the use of an uninitialized pointer on the stack, which allows a hacker to execute arbitrary code and compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Arena Simulation software for modeling and automating discrete events is related to the use of an uninitialized pointer on the stack. Exploiting this vulnerability allows a attacker to execute arbitrary code and compromise the confidentiality, integrity, and accessibility...

7.8CVSS6AI score0.00291EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/04/02 12:00 a.m.11 views

The vulnerability of the Arena Simulation software in simulating and automating discrete events lies in its ability to read data beyond the buffer in memory. This allows attackers to execute arbitrary code and compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Arena Simulation software for modeling and automating discrete events is related to reading data beyond the buffer in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code and compromise the confidentiality, integrity, and accessibility of...

7.8CVSS6.2AI score0.00256EPSS
SaveExploits0References2Affected Software1
CNVD
CNVD
added 2024/03/27 12:00 a.m.60 views

Rockwell Automation Arena Simulation Software Arbitrary Code Execution Vulnerability

Rockwell Automation Arena Simulation Software is a suite of simulation software from Rockwell Automation that provides 3D animation and graphics capabilities. An arbitrary code execution vulnerability exists in Rockwell Automation Arena Simulation Software, which can be exploited by an attacker t...

7.8CVSS7.9AI score0.00256EPSS
SaveExploits0References1
CNVD
CNVD
added 2024/03/27 12:00 a.m.47 views

Rockwell Automation Arena Simulation Software Free After Use Vulnerability

Rockwell Automation Arena Simulation Software is a suite of simulation software from Rockwell Automation that provides 3D animation and graphics capabilities. A free after-use vulnerability exists in Rockwell Automation Arena Simulation Software, which can be exploited by attackers to insert...

7.8CVSS7.5AI score0.00232EPSS
SaveExploits0References1
CNVD
CNVD
added 2024/03/27 12:00 a.m.49 views

Rockwell Automation Arena Simulation Software Heap Buffer Overflow Vulnerability

Rockwell Automation Arena Simulation Software is a suite of simulation software from Rockwell Automation that provides 3D animation and graphics capabilities. A heap buffer overflow vulnerability exists in Rockwell Automation Arena Simulation Software, which can be exploited by an attacker to...

7.8CVSS7.8AI score0.00236EPSS
SaveExploits0References1
CNVD
CNVD
added 2024/03/27 12:00 a.m.16 views

Rockwell Automation Arena Simulation Software Uninitialized Pointer Access Vulnerability

Rockwell Automation Arena Simulation Software is a suite of simulation software from Rockwell Automation that provides 3D animation and graphics capabilities. An uninitialized pointer access vulnerability exists in Rockwell Automation Arena Simulation Software, which can be exploited by an attack...

7.8CVSS6.8AI score0.00291EPSS
SaveExploits0References1
NVD
NVD
added 2024/03/26 4:15 p.m.17 views

CVE-2024-2929

A memory corruption vulnerability in Rockwell Automation Arena Simulation software could potentially allow a malicious user to insert unauthorized code to the software by corrupting the memory triggering an access violation. Once inside, the threat actor can run harmful code on the system. This...

7.8CVSS7.7AI score0.00349EPSS
SaveExploits0References1
OSV
OSV
added 2024/03/26 4:15 p.m.7 views

CVE-2024-21919

An uninitialized pointer in Rockwell Automation Arena Simulation software could potentially allow a malicious user to insert unauthorized code to the software by leveraging the pointer after it is properly. Once inside, the threat actor can run harmful code on the system. This affects the...

7.8CVSS5.9AI score0.00291EPSS
SaveExploits0References1
NVD
NVD
added 2024/03/26 4:15 p.m.28 views

CVE-2024-21919

An uninitialized pointer in Rockwell Automation Arena Simulation software could potentially allow a malicious user to insert unauthorized code to the software by leveraging the pointer after it is properly. Once inside, the threat actor can run harmful code on the system. This affects the...

7.8CVSS7.5AI score0.00291EPSS
SaveExploits0References1
OSV
OSV
added 2024/03/26 4:15 p.m.9 views

CVE-2024-21920

A memory buffer vulnerability in Rockwell Automation Arena Simulation could potentially let a threat actor read beyond the intended memory boundaries. This could reveal sensitive information and even cause the application to crash, resulting in a denial-of-service condition. To trigger this, the...

7.1CVSS6AI score0.0022EPSS
SaveExploits0References1
NVD
NVD
added 2024/03/26 4:15 p.m.19 views

CVE-2024-21920

A memory buffer vulnerability in Rockwell Automation Arena Simulation could potentially let a threat actor read beyond the intended memory boundaries. This could reveal sensitive information and even cause the application to crash, resulting in a denial-of-service condition. To trigger this, the...

7.1CVSS4.9AI score0.0022EPSS
SaveExploits0References1
NVD
NVD
added 2024/03/26 4:15 p.m.22 views

CVE-2024-21918

A memory buffer vulnerability in Rockwell Automation Arena Simulation software could potentially allow a malicious user to insert unauthorized code to the software by corrupting the memory and triggering an access violation. Once inside, the threat actor can run harmful code on the system. This...

7.8CVSS7.6AI score0.00232EPSS
SaveExploits0References1
NVD
NVD
added 2024/03/26 4:15 p.m.24 views

CVE-2024-21912

An arbitrary code execution vulnerability in Rockwell Automation Arena Simulation could let a malicious user insert unauthorized code into the software. This is done by writing beyond the designated memory area, which causes an access violation. Once inside, the threat actor can run harmful code ...

7.8CVSS7.8AI score0.00256EPSS
SaveExploits0References1
OSV
OSV
added 2024/03/26 4:15 p.m.8 views

CVE-2024-21918

A memory buffer vulnerability in Rockwell Automation Arena Simulation software could potentially allow a malicious user to insert unauthorized code to the software by corrupting the memory and triggering an access violation. Once inside, the threat actor can run harmful code on the system. This...

7.8CVSS6.1AI score0.00232EPSS
SaveExploits0References1
OSV
OSV
added 2024/03/26 4:15 p.m.7 views

CVE-2024-21912

An arbitrary code execution vulnerability in Rockwell Automation Arena Simulation could let a malicious user insert unauthorized code into the software. This is done by writing beyond the designated memory area, which causes an access violation. Once inside, the threat actor can run harmful code ...

7.8CVSS6.3AI score0.00256EPSS
SaveExploits0References1
Rows per page
Query Builder