Rockwell Automation Inc. Arena Simulation

Name: Rockwell Automation Inc. Arena Simulation
Brand: Rockwell Automation Inc.

productRU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

by severity

2critical33high0medium0low

updated 2026-10-28

vulnerabilities (37)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2019-13510US	high7.8	12.0% (96th)	—	no fix	2019-08-15	≤ 16.00.01
CVE-2023-29462US	high8.8	0.90% (59th)	—	no fix	2023-05-09	2 versions
CVE-2023-29461US	critical9.8	0.85% (58th)	—	no fix	2023-05-09	2 versions
CVE-2023-29460US	critical9.8	0.85% (58th)	—	no fix	2023-05-09	2 versions
CVE-2024-2929US	high7.8	0.35% (28th)	—	no fix	2024-03-26	16.00 → 16.20.03
CVE-2024-11364US	high7.3	0.34% (28th)	—	no fix	2024-12-19	≤ 16.20.07
CVE-2025-3289US	high7.8	0.31% (23rd)	—	no fix	2025-04-08	≤ 16.20.09
CVE-2025-3287US	high7.8	0.31% (23rd)	—	no fix	2025-04-08	≤ 16.20.09
CVE-2025-3288US	high7.8	0.30% (23rd)	—	no fix	2025-04-08	≤ 16.20.09
CVE-2025-3286US	high7.8	0.30% (23rd)	—	no fix	2025-04-08	≤ 16.20.09
CVE-2025-3285US	high7.8	0.30% (23rd)	—	no fix	2025-04-08	≤ 16.20.09
CVE-2025-2829US	high7.8	0.30% (23rd)	—	no fix	2025-04-08	≤ 16.20.09
CVE-2025-2293US	high7.8	0.30% (23rd)	—	no fix	2025-04-08	≤ 16.20.09
CVE-2025-2288US	high7.8	0.30% (23rd)	—	no fix	2025-04-08	≤ 16.20.09
CVE-2025-2287US	high7.8	0.30% (23rd)	—	no fix	2025-04-08	≤ 16.20.09
CVE-2025-2286US	high7.8	0.30% (23rd)	—	no fix	2025-04-08	≤ 16.20.09
CVE-2025-2285US	high7.8	0.30% (23rd)	—	no fix	2025-04-08	≤ 16.20.09
CVE-2024-21919US	high7.8	0.29% (21st)	—	no fix	2024-03-26	16.00 → 16.20.03
CVE-2023-27854US	high7.8	0.27% (20th)	—	no fix	2023-10-27	≤ 16.20.00001
CVE-2025-7025US	high7.8	0.27% (19th)	—	no fix	2025-08-05	≤ 16.20.10
CVE-2023-27858US	high7.8	0.27% (19th)	—	no fix	2023-10-27	≤ 16.20.00001
CVE-2026-8314US	high7.3	0.27% (18th)	—	no fix	2026-07-14	≤ 17.00.00
CVE-2026-8313US	high7.3	0.27% (18th)	—	no fix	2026-07-14	≤ 17.00.00
CVE-2026-8312US	high7.3	0.27% (18th)	—	no fix	2026-07-14	≤ 17.00.01
CVE-2026-8085US	high7.3	0.27% (18th)	—	no fix	2026-07-14	≤ 17.00.01
CVE-2024-21912US	high7.8	0.26% (17th)	—	no fix	2024-03-26	16.00 → 16.20.03
CVE-2024-12175US	high7.8	0.25% (17th)	—	no fix	2024-12-19	≤ 16.20.07
CVE-2024-21913US	high7.8	0.24% (15th)	—	no fix	2024-03-26	16.00 → 16.20.03
CVE-2025-6377US	high7.8	0.23% (14th)	—	no fix	2025-07-09	≤ 16.20.09
CVE-2025-6376US	high7.8	0.23% (14th)	—	no fix	2025-07-09	≤ 16.20.09
CVE-2024-11157US	high7.3	0.23% (14th)	—	no fix	2024-12-19	≤ 16.20.07
CVE-2024-11155US	—	0.23% (14th)	—	no fix	2024-12-05	≤ 16.20.06
CVE-2024-21918US	high7.8	0.23% (14th)	—	no fix	2024-03-26	16.00 → 16.20.03
CVE-2024-11158US	—	0.23% (14th)	—	no fix	2024-12-05	≤ 16.20.06
CVE-2024-12672US	high7.3	0.22% (13th)	—	no fix	2024-12-19	≤ 16.20.07
CVE-2024-21920US	high7.1	0.22% (12th)	—	no fix	2024-03-26	≤ 16.00.00
CVE-2025-11918US	high7.3	0.17% (6th)	—	no fix	2025-11-14	≤ 16.20.11

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-787Out-of-bounds Write16 CVEs
CWE-125Out-of-bounds Read9 CVEs
CWE-824Access of Uninitialized Pointer5 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer4 CVEs
CWE-20Improper Input Validation4 CVEs
CWE-416Use After Free4 CVEs
CWE-457Use of Uninitialized Variable3 CVEs
CWE-121Stack-based Buffer Overflow2 CVEs

sources (1)

Which sources assert this record, and when.

RUBDU (FSTEC Data Security Threats Database)37 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan