Summary
Successful exploitation of these vulnerabilities could allow an attacker to cause a current Arena
session to fault or enter a denial-of-service (DoS) state, allowing the attacker to run arbitrary
code.
Vulnerabilities 5
-
Unscored —CVE-2019-13510 EPSS 12%
Rockwell Automation Arena Simulation Software versions 16.00.00 and earlier contain a USE AFTER FREE CWE-416. A malicio…
-
Unscored —
Rockwell Automation Arena Simulation Software versions 16.00.00 and earlier contain an INFORMATION EXPOSURE CWE-200. A …
-
Unscored —
A maliciously crafted program file opened by an unsuspecting user of Rockwell Automation Arena Simulation Software vers…
-
Unscored —
A maliciously crafted program file opened by an unsuspecting user of Rockwell Automation Arena Simulation Software vers…
-
Unscored —
In Rockwell Automation Arena Simulation Software Cat. 9502-Ax, Versions 16.00.00 and earlier, a maliciously crafted Are…
Revision history
-
#3
ICSA-19-213-05 Rockwell Automation Arena Simulation Software (Update B)
-
#2
ICSA-19-213-05 Rockwell Automation Arena Simulation Software (Update A)
-
#1
ICSA-19-213-05 Rockwell Automation Arena Simulation Software
References
-
ICS Advisory ICSA-19-213-05 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-19-213-05
-
Recommended Practices
https://www.us-cert.gov/ncas/tips/ST04-014
-
Recommended Practices
https://www.us-cert.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://www.us-cert.gov/ics/tips/ICS-TIP-12-146-01B