Skip to content
Sign in
8.5 High

CVE-2024-11158 An “uninitialized variable” code execution vulnerability exists in the Rockwell Automation Arena® that could allow a…

Description

An “uninitialized variable” code execution vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to craft a DOE file and force the software to access a variable before it being initialized. If exploited, a threat actor could leverage this vulnerability to execute arbitrary code. To exploit this vulnerability, a legitimate user must execute the malicious code crafted by the threat actor.

Affected products and versions

Product Affected versions Fixed in
Arena® Versions not published
arena 16.20 earliest → < 16.20.00 16.20.00

Other CVEs of Arena®

The 21 CVEs of Arena® →
CVE-2025-6376 A remote code execution security issue exists in the Rockwell Automation Arena®.  A crafted DOE file can force Arena… 7.1 High CVE-2025-6377 A remote code execution security issue exists in the Rockwell Automation Arena®.  A crafted DOE file can force Arena… 7.1 High CVE-2025-3289 A local code execution vulnerability exists in the Rockwell Automation Arena® due to a stack-based memory buffer… 8.5 High CVE-2025-3288 A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat actor being able to read… 8.5 High
Track this CVE