Description
An arbitrary code execution vulnerability contained in Rockwell Automation's Arena Simulation software was reported that could potentially allow a malicious user to commit unauthorized arbitrary code to the software by using a memory buffer overflow in the heap.
potentially resulting in a complete loss of confidentiality, integrity, and availability.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Rockwell Automation | Arena Simulation | 16.00 – ≤ 16.20 | — |
Advisories 1
- ICSA-23-131-10 Rockwell Automation Arena Simulation Software CISA ICS & IT advisories · May 12, 2023