CVE-2024-21918

Rockwell Automation Arena Simulation Software (Arena Simulation) is affected by CVE-2024-21918, a memory corruption vulnerability in the memory handling (memory corruption/overflow) that could allow an attacker to execute arbitrary code after opening a malicious file. Affected product: Arena Simu...

CVE-2024-21913

Summary: Rockwell Automation Arena Simulation Software is affected by a heap-based memory buffer overflow vulnerability (CWE-122) that can allow a malicious user to run arbitrary code by overstepping memory boundaries, triggered by opening a malicious file. Affected product: Arena Simulation Soft...

CVE-2024-21913 Rockwell Automation Arena Simulation Vulnerable To Memory Corruption

A heap-based memory buffer overflow vulnerability in Rockwell Automation Arena Simulation software could potentially allow a malicious user to insert unauthorized code into the software by overstepping the memory boundaries, which triggers an access violation. Once inside, the threat actor can ru...

CVE-2024-21912 Rockwell Automation Arena Simulation vulnerable to out of bounds write

An arbitrary code execution vulnerability in Rockwell Automation Arena Simulation could let a malicious user insert unauthorized code into the software. This is done by writing beyond the designated memory area, which causes an access violation. Once inside, the threat actor can run harmful code ...

CVE-2024-21912 Rockwell Automation Arena Simulation vulnerable to out of bounds write

An arbitrary code execution vulnerability in Rockwell Automation Arena Simulation could let a malicious user insert unauthorized code into the software. This is done by writing beyond the designated memory area, which causes an access violation. Once inside, the threat actor can run harmful code ...

CVE-2024-21912

Rockwell Automation Arena Simulation Software (Arena Simulation) is affected by CVE-2024-21912 (out-of-bounds write / arbitrary code execution). The vulnerability arises from writing beyond designated memory, causing an access violation and allowing code execution when a user opens a malicious fi...

Rockwell Automation Arena Simulation

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION : low attack complexity Vendor : Rockwell Automation Equipment : Arena Simulation Software Vulnerabilities : Out-of-bounds Write, Heap-based Buffer Overflow, Improper Restriction of Operations within the Bounds of a Memory Buffer, Use After...

Rockwell Automation Arena Simulation Software 缓冲区错误漏洞

Rockwell Automation Arena Simulation Software is a suite of simulation software from Rockwell Automation that provides 3D animation and graphics capabilities. An arbitrary code execution vulnerability exists in Rockwell Automation Arena Simulation Software, which can be exploited by an attacker t...

Rockwell Automation Arena Simulation Software 缓冲区错误漏洞

Rockwell Automation Arena Simulation Software is a suite of simulation software from Rockwell Automation that provides 3D animation and graphics capabilities. A security vulnerability exists in Rockwell Automation Arena Simulation Software, which stems from a memory buffer vulnerability that coul...

CVE-2024-2929: Improper Restriction of Operations within the Bounds of a Memory Buffer

A memory corruption vulnerability in Rockwell Automation Arena Simulation software could potentially allow a malicious user to insert unauthorized code to the software by corrupting the memory triggering an access violation. Once inside, the threat actor can run harmful code on the system. This...

PT-2024-2519 · Rockwell Automation · Rockwell Automation Arena Simulation

Name of the Vulnerable Software and Affected Versions: Rockwell Automation Arena Simulation affected versions not specified Description: The issue is related to a buffer overflow in memory, allowing an attacker to execute arbitrary code by writing beyond the designated memory area, causing an...

CVE-2024-21912: Out-of-bounds Write

An arbitrary code execution vulnerability in Rockwell Automation Arena Simulation could let a malicious user insert unauthorized code into the software. This is done by writing beyond the designated memory area, which causes an access violation. Once inside, the threat actor can run harmful code ...

CVE-2024-21913: Heap-based Buffer Overflow

A heap-based memory buffer overflow vulnerability in Rockwell Automation Arena Simulation software could potentially allow a malicious user to insert unauthorized code into the software by overstepping the memory boundaries, which triggers an access violation. Once inside, the threat actor can ru...

PT-2024-2515 · Rockwell Automation · Rockwell Automation Arena Simulation

Name of the Vulnerable Software and Affected Versions: Rockwell Automation Arena Simulation affected versions not specified Description: A memory buffer vulnerability in Rockwell Automation Arena Simulation software could potentially allow a malicious user to insert unauthorized code to the...

PT-2024-2517 · Rockwell Automation · Rockwell Automation Arena Simulation

Name of the Vulnerable Software and Affected Versions: Rockwell Automation Arena Simulation affected versions not specified Description: A heap-based memory buffer overflow vulnerability could potentially allow a malicious user to insert unauthorized code into the software by overstepping the...

PT-2024-2520 · Rockwell Automation · Rockwell Automation Arena Simulation

Name of the Vulnerable Software and Affected Versions: Rockwell Automation Arena Simulation affected versions not specified Description: The issue is related to a memory buffer vulnerability that could allow a threat actor to read beyond the intended memory boundaries. This could reveal sensitive...

CVE-2024-21918: Use After Free

A memory buffer vulnerability in Rockwell Automation Arena Simulation software could potentially allow a malicious user to insert unauthorized code to the software by corrupting the memory and triggering an access violation. Once inside, the threat actor can run harmful code on the system. This...

CVE-2024-21920: Out-of-bounds Read

A memory buffer vulnerability in Rockwell Automation Arena Simulation could potentially let a threat actor read beyond the intended memory boundaries. This could reveal sensitive information and even cause the application to crash, resulting in a denial-of-service condition. To trigger this, the...

PT-2024-2516 · Rockwell Automation · Rockwell Automation Arena Simulation

Name of the Vulnerable Software and Affected Versions: Rockwell Automation Arena Simulation affected versions not specified Description: A memory corruption issue in the software is caused by a buffer overflow in memory. This could allow an attacker to impact the confidentiality, integrity, and...

CVE-2024-21919: Access of Uninitialized Pointer

An uninitialized pointer in Rockwell Automation Arena Simulation software could potentially allow a malicious user to insert unauthorized code to the software by leveraging the pointer after it is properly. Once inside, the threat actor can run harmful code on the system. This affects the...