Rockwell Automation Arena Simulation
Advisory ansehen veröffentlicht 2024-03-26
Successful exploitation of these vulnerabilities could crash the application or allow an attacker to run harmful code on the system.
01
beschreibt (6)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-2929US | high7.8 | — | ||
A memory corruption vulnerability in Rockwell Automation Arena Simulation software could potentially allow a malicious user to insert unauthorized code to the software by corrupti… | ||||
| CVE-2024-21920US | high7.1 | — | ||
A memory buffer vulnerability in Rockwell Automation Arena Simulation could potentially let a threat actor read beyond the intended memory boundaries. This could reveal sensitiv… | ||||
| CVE-2024-21919US | high7.8 | — | ||
An uninitialized pointer in Rockwell Automation Arena Simulation software could potentially allow a malicious user to insert unauthorized code to the software by leveraging the po… | ||||
| CVE-2024-21918US | high7.8 | — | ||
A memory buffer vulnerability in Rockwell Automation Arena Simulation software could potentially allow a malicious user to insert unauthorized code to the software by corrupting t… | ||||
| CVE-2024-21913US | high7.8 | — | ||
A heap-based memory buffer overflow vulnerability in Rockwell Automation Arena Simulation software could potentially allow a malicious user to insert unauthorized code into the so… | ||||
| CVE-2024-21912US | high7.8 | — | ||
An arbitrary code execution vulnerability in Rockwell Automation Arena Simulation could let a malicious user insert unauthorized code into the software. This is done by writing be… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSA-24-086-03 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-24-086-03 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
Behebungen (6)
- MitigationArena Simulation Software
Do not open untrusted files from unknown sources.
- MitigationArena Simulation Software
Do not open untrusted files from unknown sources.
- MitigationArena Simulation Software
Do not open untrusted files from unknown sources.
- MitigationArena Simulation Software
Do not open untrusted files from unknown sources.
- MitigationArena Simulation Software
Do not open untrusted files from unknown sources.
- MitigationArena Simulation Software
Do not open untrusted files from unknown sources.
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan