7.1
High
CVE-2025-11918 Rockwell Automation Arena® suffers from a stack-based buffer overflow vulnerability
Description
Rockwell Automation Arena® suffers from a stack-based buffer overflow vulnerability. The specific flaw exists within the parsing of DOE files. Local attackers are able to exploit this issue to potentially execute arbitrary code on affected installations of Arena®. Exploiting the vulnerability requires opening a malicious DOE file.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Arena® Simulation | Versions not published |
Other CVEs of Arena® Simulation
The 7 CVEs of Arena® Simulation →
CVE-2026-8314
A security issue exists within Arena® Simulation due to a memory corruption vulnerability in the siman.exe (Siman)…
7.0
High
CVE-2026-8313
A security issue exists within Arena® Simulation due to a memory corruption vulnerability in the linker.exe (Siman)…
7.0
High
CVE-2026-8085
A security issue exists within Arena® Simulation due to a memory corruption vulnerability in the model.exe (Siman)…
7.0
High
CVE-2025-7033
A memory abuse issue exists in the Rockwell Automation Arena® Simulation
8.4
High