Rockwell Automation Arena (Update C)
Successful exploitation of these vulnerabilities could result in execution of arbitrary code.
describes (11)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-6071US | — | — | ||
A remote code execution security issue exists in the affected products when parsing DOE files that could allow a remote attacker to write past the end of an allocated object and ex… | ||||
| CVE-2025-6377US | high7.8 | — | ||
A remote
code execution security issue exists in the Rockwell Automation Arena®. A crafted DOE
file can force Arena Simulation to write beyond the boundaries of an allocated
objec… | ||||
| CVE-2025-6376US | high7.8 | — | ||
A remote
code execution security issue exists in the Rockwell Automation Arena®. A crafted DOE
file can force Arena Simulation to write beyond the boundaries of an allocated
objec… | ||||
| CVE-2024-12672US | high7.3 | — | ||
A third-party vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to write beyond the boundaries of allocated memory in a DOE file. If exploited,… | ||||
| CVE-2024-12175US | high7.8 | — | ||
Another “use after free” code execution vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to craft a DOE file and force the software to use a r… | ||||
| CVE-2024-11364US | high7.3 | — | ||
Another “uninitialized variable” code execution vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to craft a DOE file and force the software to… | ||||
| CVE-2024-11157US | high7.3 | — | ||
A third-party vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to write beyond the boundaries of allocated memory in a DOE file. If exploited,… | ||||
| CVE-2024-12130US | high7.8 | — | ||
An “out of bounds read” code execution vulnerability exists in the Rockwell Automation Arena®
that could allow a threat actor to craft a DOE file and force the software to read b… | ||||
| CVE-2024-11158US | — | — | ||
An “uninitialized variable” code execution vulnerability exists in the
Rockwell Automation Arena®
that could allow a threat actor to craft a DOE file and force the software to… | ||||
| CVE-2024-11156US | high7.8 | — | ||
An “out of bounds write” code execution vulnerability exists in the
Rockwell Automation Arena®
that could allow a threat actor to write beyond the boundaries of allocated memor… | ||||
| CVE-2024-11155US | — | — | ||
A “use after free” code execution vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to craft a DOE file and force the software to use a resour… | ||||
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-24-345-06 JSONself
- ICSA Advisory ICSA-24-345-06 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (20)
- MitigationArena
Hold the control key down when loading files to help prevent the VBA file stream from loading.
- MitigationArena
Hold the control key down when loading files to help prevent the VBA file stream from loading.
- MitigationArena
Hold the control key down when loading files to help prevent the VBA file stream from loading.
- MitigationArena
Hold the control key down when loading files to help prevent the VBA file stream from loading.
- MitigationArena
Hold the control key down when loading files to help prevent the VBA file stream from loading.
- MitigationArena
Hold the control key down when loading files to help prevent the VBA file stream from loading.
- MitigationArena
Hold the control key down when loading files to help prevent the VBA file stream from loading.
- MitigationArena
Hold the control key down when loading files to help prevent the VBA file stream from loading.
- MitigationArena
Hold the control key down when loading files to help prevent the VBA file stream from loading.
- MitigationArena 32 bit
Hold the control key down when loading files to help prevent the VBA file stream from loading.
- MitigationArena 32 bit
Hold the control key down when loading files to help prevent the VBA file stream from loading.
- FixedArena
Do not load untrusted Arena model files.
- FixedArena
Do not load untrusted Arena model files.
- FixedArena
Do not load untrusted Arena model files.
- FixedArena
Do not load untrusted Arena model files.
- FixedArena
Do not load untrusted Arena model files.
- FixedArena
Do not load untrusted Arena model files.
- FixedArena
Do not load untrusted Arena model files.
- FixedArena
Do not load untrusted Arena model files.
- FixedArena
Do not load untrusted Arena model files.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan