CVE-2023-27858

CVE-2023-27858 affects Rockwell Automation Arena, specifically the Arena software (e.g., version 16.20.00001 per ICS-CISA advisories). The vulnerability stems from an uninitialized pointer in the application, enabling a local attacker to execute arbitrary code by processing a malformed or malicio...

CVE-2023-27858 Rockwell Automation Arena® Simulation Uninitialized Pointer Vulnerability

Rockwell Automation Arena Simulation contains an arbitrary code execution vulnerability that could potentially allow a malicious user to commit unauthorized code to the software by using an uninitialized pointer in the application. The threat-actor could then execute malicious code on the system...