Skip to content
OpenAdvisories
High · 8.5 CVE-2024-11156 EUVD-2024-34015GHSA-f5gg-m3qx-wxvq

Rockwell Automation Arena® Out of Bounds Write Vulnerability

Published Dec 5, 2024 · Updated Dec 10, 2024 · Assigned by Rockwell

Description

An “out of bounds write” code execution vulnerability exists in the

Rockwell Automation Arena®

that could allow a threat actor to write beyond the boundaries of allocated memory in a DOE file. If exploited, a threat actor could leverage this vulnerability to execute arbitrary code. To exploit this vulnerability, a legitimate user must execute the malicious code crafted by the threat actor.

Affected products

VendorProductAffectedFixed
Rockwell Automation Arena® All versions 16.20.03 and prior —

Advisories 1

References