Skip to content
OpenAdvisories
High ICSA-25-219-04 3 CVEs

Rockwell Automation Arena

Published Aug 7, 2025 · Updated Aug 7, 2025

Vendor: Rockwell Automation Product: Arena

Summary

Successful exploitation of these vulnerabilities could allow an attacker to disclose information and execute arbitrary code.

Vulnerabilities 3

  • High 8.4
    CVE-2025-7025

    Rockwell Automation Heap-based Buffer Overflow In Arena® Simulation

    A memory abuse issue exists in the Rockwell Automation Arena® Simulation. A custom file can force Arena Simulation to read and write past the end of memory space. Successful use requires user action, such as opening a bad file or webpage. If used, a threat ac…

    Rockwell Automation Arena® Simulation ICS / OT
  • High 8.4
    CVE-2025-7032

    Rockwell Automation Stack-based Buffer Overflow In Arena® Simulation

    A memory abuse issue exists in the Rockwell Automation Arena® Simulation. A custom file can force Arena Simulation to read and write past the end of memory space. Successful use requires user action, such as opening a bad file or webpage. If used, a threat ac…

    Rockwell Automation Arena® Simulation ICS / OT
  • High 8.4
    CVE-2025-7033

    Rockwell Automation Heap-based Buffer Overflow In Arena® Simulation

    A memory abuse issue exists in the Rockwell Automation Arena® Simulation. A custom file can force Arena Simulation to read and write past the end of memory space. Successful use requires user action, such as opening a bad file or webpage. If used, a threat ac…

    Rockwell Automation Arena® Simulation ICS / OT

Revision history

  1. #1

    Initial Publication

References