ICSA-19-213-05

icsaUScisa_csaf_ot

Rockwell Automation Arena Simulation Software (Update B)

Advisory ansehen veröffentlicht 2019-08-01

Successful exploitation of these vulnerabilities could allow an attacker to cause a current Arena session to fault or enter a denial-of-service (DoS) state, allowing the attacker to run arbitrary code.

01

beschreibt (5)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2019-13521UShigh7.8—
A maliciously crafted program file opened by an unsuspecting user of Rockwell Automation Arena Simulation Software version 16.00.00 and earlier may result in the limited exposure o…
CVE-2019-13519UShigh7.8—
A maliciously crafted program file opened by an unsuspecting user of Rockwell Automation Arena Simulation Software version 16.00.00 and earlier may result in the limited exposure o…
CVE-2019-13527UShigh7.8—
In Rockwell Automation Arena Simulation Software Cat. 9502-Ax, Versions 16.00.00 and earlier, a maliciously crafted Arena file opened by an unsuspecting user may result in the use…
CVE-2019-13511USlow3.3—
Rockwell Automation Arena Simulation Software versions 16.00.00 and earlier contain an INFORMATION EXPOSURE CWE-200. A maliciously crafted Arena file opened by an unsuspecting user…
CVE-2019-13510UShigh7.8—
Rockwell Automation Arena Simulation Software versions 16.00.00 and earlier contain a USE AFTER FREE CWE-416. A maliciously crafted Arena file opened by an unsuspecting user may re…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (5)

  • MitigationArena Simulation Software for Manufacturing Cat. 9502-Ax

    Do not open untrusted .doe files with Arena Simulation Software.

  • MitigationArena Simulation Software for Manufacturing Cat. 9502-Ax

    Do not open untrusted .doe files with Arena Simulation Software.

  • MitigationArena Simulation Software for Manufacturing Cat. 9502-Ax

    Do not open untrusted .doe files with Arena Simulation Software.

  • MitigationArena Simulation Software for Manufacturing Cat. 9502-Ax

    Do not open untrusted .doe files with Arena Simulation Software.

  • MitigationArena Simulation Software for Manufacturing Cat. 9502-Ax

    Do not open untrusted .doe files with Arena Simulation Software.

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan