Skip to content
OpenAdvisories
Medium · 4.4 CVE-2024-21920 EUVD-2024-19526GHSA-xwx2-w5q7-pgf8

Rockwell Automation Arena Simulation Vulnerable To Buffer Overflow

Published Mar 26, 2024 · Updated Aug 6, 2024 · Assigned by Rockwell

Description

A memory buffer vulnerability in Rockwell Automation Arena Simulation could potentially let a threat actor read beyond the intended memory boundaries. This could reveal sensitive information and even cause the application to crash, resulting in a denial-of-service condition. To trigger this, the user would unwittingly need to open a malicious file shared by the threat actor.

Affected products

VendorProductAffectedFixed
Rockwell Automation Arena Simulation Version 16.00 - 16.20.02 —

Advisories 1

References