ICSA-25-100-07

icsaUScisa_csaf_ot

Rockwell Automation Arena

view advisory published 2025-04-10

Successful exploitation of these vulnerabilities could disclose information to an attacker or allow execution of arbitrary code on the system.

01

describes (11)

Related CVEs.

IDseverity exploitable
CVE-2025-3289UShigh7.8—
A local code execution vulnerability exists in the Rockwell Automation Arena® due to a stack-based memory buffer overflow. The flaw is result of improper validation of user-supplie…
CVE-2025-3288UShigh7.8—
A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat actor being able to read outside of the allocated memory buffer. The flaw is a result…
CVE-2025-3287UShigh7.8—
A local code execution vulnerability exists in the Rockwell Automation Arena® due to a stack-based memory buffer overflow. The flaw is result of improper validation of user-supplie…
CVE-2025-3286UShigh7.8—
A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat actor being able to read outside of the allocated memory buffer. The flaw is a result…
CVE-2025-3285UShigh7.8—
A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat actor being able to read outside of the allocated memory buffer. The flaw is a result…
CVE-2025-2829UShigh7.8—
A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat actor being able to write outside of the allocated memory buffer. The flaw is a result…
CVE-2025-2293UShigh7.8—
A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat actor being able to write outside of the allocated memory buffer. The flaw is a result…
CVE-2025-2288UShigh7.8—
A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat actor being able to write outside of the allocated memory buffer. The flaw is a result…
CVE-2025-2287UShigh7.8—
A local code execution vulnerability exists in the Rockwell Automation Arena®  due to an uninitialized pointer. The flaw is result of improper validation of user-supplied data. If…
CVE-2025-2286UShigh7.8—
A local code execution vulnerability exists in the Rockwell Automation Arena®  due to an uninitialized pointer. The flaw is result of improper validation of user-supplied data. If…
CVE-2025-2285UShigh7.8—
A local code execution vulnerability exists in the Rockwell Automation Arena®  due to an uninitialized pointer. The flaw is result of improper validation of user-supplied data. If…
02

references

External citations — patches, advisories, analysis.

03

remediations (11)

  • MitigationArena

    Rockwell Automation recommends users upgrade to V16.20.09 or later.

  • MitigationArena

    Rockwell Automation recommends users upgrade to V16.20.09 or later.

  • MitigationArena

    Rockwell Automation recommends users upgrade to V16.20.09 or later.

  • MitigationArena

    Rockwell Automation recommends users upgrade to V16.20.09 or later.

  • MitigationArena

    Rockwell Automation recommends users upgrade to V16.20.09 or later.

  • MitigationArena

    Rockwell Automation recommends users upgrade to V16.20.09 or later.

  • MitigationArena

    Rockwell Automation recommends users upgrade to V16.20.09 or later.

  • MitigationArena

    Rockwell Automation recommends users upgrade to V16.20.09 or later.

  • MitigationArena

    Rockwell Automation recommends users upgrade to V16.20.09 or later.

  • MitigationArena

    Rockwell Automation recommends users upgrade to V16.20.09 or later.

  • MitigationArena

    Rockwell Automation recommends users upgrade to V16.20.09 or later.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan