Summary
Successful exploitation of these vulnerabilities could crash the application or allow an attacker to run harmful code on the system.
Vulnerabilities 6
-
High 7.8
Rockwell Automation Arena Simulation vulnerable to out of bounds write
An arbitrary code execution vulnerability in Rockwell Automation Arena Simulation could let a malicious user insert unauthorized code into the software. This is done by writing beyond the designated memory area, which causes an access violation. Once inside, …
-
High 7.8
Rockwell Automation Arena Simulation Vulnerable To Memory Corruption
A heap-based memory buffer overflow vulnerability in Rockwell Automation Arena Simulation software could potentially allow a malicious user to insert unauthorized code into the software by overstepping the memory boundaries, which triggers an access violation…
-
High 7.8
Rockwell Automation Arena Simulation Vulnerable To Memory Corruption
A memory buffer vulnerability in Rockwell Automation Arena Simulation software could potentially allow a malicious user to insert unauthorized code to the software by corrupting the memory and triggering an access violation. Once inside, the threat actor can …
-
High 7.8
Rockwell Automation Arena Simulation Vulnerable To Uninitialized Pointer
An uninitialized pointer in Rockwell Automation Arena Simulation software could potentially allow a malicious user to insert unauthorized code to the software by leveraging the pointer after it is properly. Once inside, the threat actor can run harmful code o…
-
High 7.8
Rockwell Automation Arena Simulation Vulnerable To Memory Corruption
A memory corruption vulnerability in Rockwell Automation Arena Simulation software could potentially allow a malicious user to insert unauthorized code to the software by corrupting the memory triggering an access violation. Once inside, the threat actor can …
-
Medium 4.4
Rockwell Automation Arena Simulation Vulnerable To Buffer Overflow
A memory buffer vulnerability in Rockwell Automation Arena Simulation could potentially let a threat actor read beyond the intended memory boundaries. This could reveal sensitive information and even cause the application to crash, resulting in a denial-of-se…
Revision history
-
#1
Initial Publication
References
-
ICSA Advisory ICSA-24-086-03 - Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-24-086-03
-
Recommended Practices
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
-
Recommended Practices
https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
-
Recommended Practices
https://www.cisa.gov/topics/industrial-control-systems
-
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
-
Recommended Practices
https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B