ICSA-23-131-10

icsaUScisa_csaf_ot

Rockwell Automation Arena Simulation Software

view advisory published 2023-05-12

Successful exploitation of these vulnerabilities could allow a malicious user to commit unauthorized arbitrary code to the software using a memory buffer overflow.

01

describes (3)

Related CVEs.

IDseverity exploitable
CVE-2023-29462UShigh8.8—
An arbitrary code execution vulnerability contained in Rockwell Automation's Arena Simulation software was reported that could potentially allow a malicious user to commit unauthor…
CVE-2023-29461UScritical9.8—
An arbitrary code execution vulnerability contained in Rockwell Automation's Arena Simulation software was reported that could potentially allow a malicious user to commit unauthor…
CVE-2023-29460UScritical9.8—
An arbitrary code execution vulnerability contained in Rockwell Automation's Arena Simulation software was reported that could potentially allow a malicious user to commit unauthor…
02

references

External citations — patches, advisories, analysis.

03

remediations (3)

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan