Skip to content
Sign in
8.5 High

CVE-2025-3288 A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat actor being able to read…

Description

A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat actor being able to read outside of the allocated memory buffer. The flaw is a result of improper validation of user-supplied data.  If exploited a threat actor can disclose information and execute arbitrary code on the system. To exploit the vulnerability a legitimate user must open a malicious DOE file.

Affected products and versions

Product Affected versions Fixed in
Arena® Versions not published

Other CVEs of Arena®

The 21 CVEs of Arena® →
CVE-2025-6376 A remote code execution security issue exists in the Rockwell Automation Arena®.  A crafted DOE file can force Arena… 7.1 High CVE-2025-6377 A remote code execution security issue exists in the Rockwell Automation Arena®.  A crafted DOE file can force Arena… 7.1 High CVE-2025-3289 A local code execution vulnerability exists in the Rockwell Automation Arena® due to a stack-based memory buffer… 8.5 High CVE-2025-3287 A local code execution vulnerability exists in the Rockwell Automation Arena® due to a stack-based memory buffer… 8.5 High
Track this CVE