Skip to content
Sign in
8.5 High

CVE-2024-11156 An “out of bounds write” code execution vulnerability exists in the Rockwell Automation Arena® that could allow a…

Description

An “out of bounds write” code execution vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to write beyond the boundaries of allocated memory in a DOE file. If exploited, a threat actor could leverage this vulnerability to execute arbitrary code. To exploit this vulnerability, a legitimate user must execute the malicious code crafted by the threat actor.

Affected products and versions

Product Affected versions Fixed in
Arena® Versions not published
arena 16.20 earliest → 16.20.03 No fix stated

Other CVEs of Arena®

The 21 CVEs of Arena® →
CVE-2025-6376 A remote code execution security issue exists in the Rockwell Automation Arena®.  A crafted DOE file can force Arena… 7.1 High CVE-2025-6377 A remote code execution security issue exists in the Rockwell Automation Arena®.  A crafted DOE file can force Arena… 7.1 High CVE-2025-3289 A local code execution vulnerability exists in the Rockwell Automation Arena® due to a stack-based memory buffer… 8.5 High CVE-2025-3288 A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat actor being able to read… 8.5 High
Track this CVE