Description
Rockwell Automation Arena Simulation Software versions 16.00.00 and earlier contain an INFORMATION EXPOSURE CWE-200. A maliciously crafted Arena file opened by an unsuspecting user may result in the limited exposure of information related to the targeted workstation.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Rockwell Automation Arena Simulation Software versions 16.00.00 and earlier | Rockwell Automation Arena Simulation Software versions 16.00.00 and earlier | — |
Advisories 1
- ICSA-19-213-05 Rockwell Automation Arena Simulation Software (Update B) CISA ICS & IT advisories · Sep 19, 2019
References
- https://www.us-cert.gov/ics/advisories/icsa-19-213-05
- https://www.zerodayinitiative.com/advisories/ZDI-20-814/
- https://www.zerodayinitiative.com/advisories/ZDI-20-810/
- https://www.zerodayinitiative.com/advisories/ZDI-20-811/
- https://www.zerodayinitiative.com/advisories/ZDI-20-813/
- https://www.zerodayinitiative.com/advisories/ZDI-20-812/