Skip to content
OpenAdvisories
High ICSA-24-319-15 1 CVE

Rockwell Automation Arena Input Analyzer

Published Nov 14, 2024 · Updated Nov 14, 2024

Vendor: Rockwell Automation Product: Arena Input Analyzer

Summary

Successful exploitation of this vulnerability could allow an attacker to disclose information and execute arbitrary code on the program.

Vulnerabilities 1

  • High 7.3
    CVE-2024-6068

    Input Validation Vulnerability exists in Arena® Input Analyzer

    A memory corruption vulnerability exists in the affected products when parsing DFT files. Local threat actors can exploit this issue to disclose information and to execute arbitrary code. To exploit this vulnerability a legitimate user must open a malicious D…

    Rockwell Automation Arena Input Analyzer ICS / OT

Revision history

  1. #1

    Initial Publication

References