ICSA-19-213-05

icsaUScisa_csaf_ot

Rockwell Automation Arena Simulation Software (Update B)

view advisory published 2019-08-01

Successful exploitation of these vulnerabilities could allow an attacker to cause a current Arena session to fault or enter a denial-of-service (DoS) state, allowing the attacker to run arbitrary code.

01

describes (5)

Related CVEs.

IDseverity exploitable
CVE-2019-13521UShigh7.8—
A maliciously crafted program file opened by an unsuspecting user of Rockwell Automation Arena Simulation Software version 16.00.00 and earlier may result in the limited exposure o…
CVE-2019-13519UShigh7.8—
A maliciously crafted program file opened by an unsuspecting user of Rockwell Automation Arena Simulation Software version 16.00.00 and earlier may result in the limited exposure o…
CVE-2019-13527UShigh7.8—
In Rockwell Automation Arena Simulation Software Cat. 9502-Ax, Versions 16.00.00 and earlier, a maliciously crafted Arena file opened by an unsuspecting user may result in the use…
CVE-2019-13511USlow3.3—
Rockwell Automation Arena Simulation Software versions 16.00.00 and earlier contain an INFORMATION EXPOSURE CWE-200. A maliciously crafted Arena file opened by an unsuspecting user…
CVE-2019-13510UShigh7.8—
Rockwell Automation Arena Simulation Software versions 16.00.00 and earlier contain a USE AFTER FREE CWE-416. A maliciously crafted Arena file opened by an unsuspecting user may re…
02

references

External citations — patches, advisories, analysis.

03

remediations (5)

  • MitigationArena Simulation Software for Manufacturing Cat. 9502-Ax

    Do not open untrusted .doe files with Arena Simulation Software.

  • MitigationArena Simulation Software for Manufacturing Cat. 9502-Ax

    Do not open untrusted .doe files with Arena Simulation Software.

  • MitigationArena Simulation Software for Manufacturing Cat. 9502-Ax

    Do not open untrusted .doe files with Arena Simulation Software.

  • MitigationArena Simulation Software for Manufacturing Cat. 9502-Ax

    Do not open untrusted .doe files with Arena Simulation Software.

  • MitigationArena Simulation Software for Manufacturing Cat. 9502-Ax

    Do not open untrusted .doe files with Arena Simulation Software.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan