ICSA-25-100-07

icsaUScisa_csaf_ot

Rockwell Automation Arena

Advisory ansehen veröffentlicht 2025-04-10

Successful exploitation of these vulnerabilities could disclose information to an attacker or allow execution of arbitrary code on the system.

01

beschreibt (11)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2025-3289UShigh7.8—
A local code execution vulnerability exists in the Rockwell Automation Arena® due to a stack-based memory buffer overflow. The flaw is result of improper validation of user-supplie…
CVE-2025-3288UShigh7.8—
A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat actor being able to read outside of the allocated memory buffer. The flaw is a result…
CVE-2025-3287UShigh7.8—
A local code execution vulnerability exists in the Rockwell Automation Arena® due to a stack-based memory buffer overflow. The flaw is result of improper validation of user-supplie…
CVE-2025-3286UShigh7.8—
A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat actor being able to read outside of the allocated memory buffer. The flaw is a result…
CVE-2025-3285UShigh7.8—
A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat actor being able to read outside of the allocated memory buffer. The flaw is a result…
CVE-2025-2829UShigh7.8—
A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat actor being able to write outside of the allocated memory buffer. The flaw is a result…
CVE-2025-2293UShigh7.8—
A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat actor being able to write outside of the allocated memory buffer. The flaw is a result…
CVE-2025-2288UShigh7.8—
A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat actor being able to write outside of the allocated memory buffer. The flaw is a result…
CVE-2025-2287UShigh7.8—
A local code execution vulnerability exists in the Rockwell Automation Arena®  due to an uninitialized pointer. The flaw is result of improper validation of user-supplied data. If…
CVE-2025-2286UShigh7.8—
A local code execution vulnerability exists in the Rockwell Automation Arena®  due to an uninitialized pointer. The flaw is result of improper validation of user-supplied data. If…
CVE-2025-2285UShigh7.8—
A local code execution vulnerability exists in the Rockwell Automation Arena®  due to an uninitialized pointer. The flaw is result of improper validation of user-supplied data. If…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (11)

  • MitigationArena

    Rockwell Automation recommends users upgrade to V16.20.09 or later.

  • MitigationArena

    Rockwell Automation recommends users upgrade to V16.20.09 or later.

  • MitigationArena

    Rockwell Automation recommends users upgrade to V16.20.09 or later.

  • MitigationArena

    Rockwell Automation recommends users upgrade to V16.20.09 or later.

  • MitigationArena

    Rockwell Automation recommends users upgrade to V16.20.09 or later.

  • MitigationArena

    Rockwell Automation recommends users upgrade to V16.20.09 or later.

  • MitigationArena

    Rockwell Automation recommends users upgrade to V16.20.09 or later.

  • MitigationArena

    Rockwell Automation recommends users upgrade to V16.20.09 or later.

  • MitigationArena

    Rockwell Automation recommends users upgrade to V16.20.09 or later.

  • MitigationArena

    Rockwell Automation recommends users upgrade to V16.20.09 or later.

  • MitigationArena

    Rockwell Automation recommends users upgrade to V16.20.09 or later.

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan