Skip to content
OpenAdvisories
High · 7.1 CVE-2025-11918 EUVD-2025-197610GHSA-qwg2-xh56-jqw6

Rockwell Automation Arena® Simulation Stack-Based Buffer Overflow Vulnerability

Published Nov 14, 2025 · Updated Nov 14, 2025 · Assigned by Rockwell

Description

Rockwell Automation Arena® suffers from a
stack-based buffer overflow vulnerability. The specific flaw exists within the
parsing of DOE files. Local attackers are able to exploit this issue to
potentially execute arbitrary code on affected installations of Arena®. Exploiting
the vulnerability requires opening a malicious DOE file.

Affected products

VendorProductAffectedFixed
Rockwell Automation Arena® Simulation Version 16.20.10 and prior —

Advisories 1

References