Known vulnerabilities in Rockwell Automation Arena®
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2025-6376 | A remote code execution security issue exists in the Rockwell Automation Arena®. A crafted DOE file can force Arena… | 7.1 High | Jul 9, 2025 |
| CVE-2025-6377 | A remote code execution security issue exists in the Rockwell Automation Arena®. A crafted DOE file can force Arena… | 7.1 High | Jul 9, 2025 |
| CVE-2025-3289 | A local code execution vulnerability exists in the Rockwell Automation Arena® due to a stack-based memory buffer… | 8.5 High | Apr 8, 2025 |
| CVE-2025-3288 | A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat actor being able to read… | 8.5 High | Apr 8, 2025 |
| CVE-2025-3287 | A local code execution vulnerability exists in the Rockwell Automation Arena® due to a stack-based memory buffer… | 8.5 High | Apr 8, 2025 |
| CVE-2025-3286 | A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat actor being able to read… | 8.5 High | Apr 8, 2025 |
| CVE-2025-3285 | A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat actor being able to read… | 8.5 High | Apr 8, 2025 |
| CVE-2025-2829 | A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat actor being able to… | 8.5 High | Apr 8, 2025 |
| CVE-2025-2293 | A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat actor being able to… | 8.5 High | Apr 8, 2025 |
| CVE-2025-2288 | A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat actor being able to… | 8.5 High | Apr 8, 2025 |
| CVE-2025-2287 | A local code execution vulnerability exists in the Rockwell Automation Arena® due to an uninitialized pointer | 8.5 High | Apr 8, 2025 |
| CVE-2025-2286 | A local code execution vulnerability exists in the Rockwell Automation Arena® due to an uninitialized pointer | 8.5 High | Apr 8, 2025 |
| CVE-2025-2285 | A local code execution vulnerability exists in the Rockwell Automation Arena® due to an uninitialized pointer | 8.5 High | Apr 8, 2025 |
| CVE-2024-11364 | Another “uninitialized variable” code execution vulnerability exists in the Rockwell Automation Arena® that could… | 8.5 High | Dec 19, 2024 |
| CVE-2024-12672 | A third-party vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to write beyond the… | 8.5 High | Dec 19, 2024 |
| CVE-2024-12175 | Another “use after free” code execution vulnerability exists in the Rockwell Automation Arena® that could allow a threat… | 8.5 High | Dec 19, 2024 |
| CVE-2024-11157 | A third-party vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to write beyond the… | 8.5 High | Dec 19, 2024 |
| CVE-2024-12130 | An “out of bounds read” code execution vulnerability exists in the Rockwell Automation Arena® that could allow a threat… | 8.5 High | Dec 5, 2024 |
| CVE-2024-11158 | An “uninitialized variable” code execution vulnerability exists in the Rockwell Automation Arena® that could allow a… | 8.5 High | Dec 5, 2024 |
| CVE-2024-11156 | An “out of bounds write” code execution vulnerability exists in the Rockwell Automation Arena® that could allow a… | 8.5 High | Dec 5, 2024 |
| CVE-2024-11155 | A “use after free” code execution vulnerability exists in the Rockwell Automation Arena® that could allow a threat… | 8.5 High | Dec 5, 2024 |
Other Rockwell Automation products
Arena Simulation 11
ArmorStart® LT 11
ArmorStart ST 10
FactoryTalk AssetCentre 9
1794-AENTR FLEX I/O EtherNet/IP adapter 8
CompactLogix and SoftLogix controllers 8
MicroLogix 8
CompactLogix L32E and L35E controllers 8
ControlLogix and GuardLogix controllers 8
1756-ENBT, 1756-EWEB, 1768-ENBT, 1768-EWEB communication modules 8
1788-ENBT FLEXLogix adapter 8
ControlLogix, CompactLogix, GuardLogix, and SoftLogix 8