Skip to content
OpenAdvisories
High ICSA-23-299-04 2 CVEs

Rockwell Automation Arena

Published Oct 26, 2023 · Updated Oct 26, 2023

Vendor: Rockwell Automation Product: Arena

Summary

Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary code by using a memory buffer overflow or using an uninitialized pointer in the application.

Vulnerabilities 2

  • High 7.8
    CVE-2023-27854

    Rockwell Automation Arena® Simulation Out of Bounds Read Vulnerability

    An arbitrary code execution vulnerability was reported to Rockwell Automation in Arena Simulation that could potentially allow a malicious user to commit unauthorized arbitrary code to the software by using a memory buffer overflow.  The threat-actor could th…

    Rockwell Automation Arena® Simulation ICS / OT
  • High 7.8
    CVE-2023-27858

    Rockwell Automation Arena® Simulation Uninitialized Pointer Vulnerability

    Rockwell Automation Arena Simulation contains an arbitrary code execution vulnerability that could potentially allow a malicious user to commit unauthorized code to the software by using an uninitialized pointer in the application.  The threat-actor could the…

    Rockwell Automation Arena® Simulation ICS / OT

Revision history

  1. #1

    Initial Publication

References