7.8
High
CVE-2024-21912 An arbitrary code execution vulnerability in Rockwell Automation Arena Simulation could let a malicious user insert…
Description
An arbitrary code execution vulnerability in Rockwell Automation Arena Simulation could let a malicious user insert unauthorized code into the software. This is done by writing beyond the designated memory area, which causes an access violation. Once inside, the threat actor can run harmful code on the system. This affects the confidentiality, integrity, and availability of the product. To trigger this, the user would unwittingly need to open a malicious file shared by the threat actor.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| arena_simulation 16.00 | 16.00 → < 16.20.03 | 16.20.03 |
| Arena Simulation | Versions not published |
Other CVEs of arena_simulation
The 4 CVEs of arena_simulation →
CVE-2024-21919
An uninitialized pointer in Rockwell Automation Arena Simulation software could potentially allow a malicious user to…
7.8
High
CVE-2024-21918
A memory buffer vulnerability in Rockwell Automation Arena Simulation software could potentially allow a malicious…
7.8
High
CVE-2023-27858
Rockwell Automation Arena Simulation contains an arbitrary code execution vulnerability that could potentially allow a…
7.8
High