Rockwell Automation Arena®

Name: Rockwell Automation Arena®
Brand: Rockwell Automation

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

critical

by severity

0critical19high0medium0low

updated 2026-10-24

vulnerabilities (21)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2024-11364US	high7.3	0.34% (27th)	—	no fix	2024-12-19	≤ All versions 16.20.06 and prior
CVE-2025-3289US	high7.8	0.31% (22nd)	—	no fix	2025-04-08	2 versions
CVE-2025-3287US	high7.8	0.31% (22nd)	—	no fix	2025-04-08	2 versions
CVE-2025-3288US	high7.8	0.30% (22nd)	—	no fix	2025-04-08	2 versions
CVE-2025-3286US	high7.8	0.30% (22nd)	—	no fix	2025-04-08	2 versions
CVE-2025-3285US	high7.8	0.30% (22nd)	—	no fix	2025-04-08	2 versions
CVE-2025-2829US	high7.8	0.30% (22nd)	—	no fix	2025-04-08	2 versions
CVE-2025-2293US	high7.8	0.30% (22nd)	—	no fix	2025-04-08	2 versions
CVE-2025-2288US	high7.8	0.30% (22nd)	—	no fix	2025-04-08	2 versions
CVE-2025-2287US	high7.8	0.30% (22nd)	—	no fix	2025-04-08	2 versions
CVE-2025-2286US	high7.8	0.30% (22nd)	—	no fix	2025-04-08	2 versions
CVE-2025-2285US	high7.8	0.30% (22nd)	—	no fix	2025-04-08	2 versions
CVE-2024-12130US	high7.8	0.30% (21st)	—	no fix	2024-12-05	≤ All versions 16.20.03 and prior
CVE-2024-12175US	high7.8	0.25% (16th)	—	no fix	2024-12-19	≤ All versions 16.20.06 and prior
CVE-2024-11156US	high7.8	0.24% (15th)	—	no fix	2024-12-05	≤ All versions 16.20.03 and prior
CVE-2025-6377US	high7.8	0.23% (13th)	—	no fix	2025-07-09	≤ ≤16.20.08
CVE-2025-6376US	high7.8	0.23% (13th)	—	no fix	2025-07-09	≤ ≤16.20.08
CVE-2024-11157US	high7.3	0.23% (13th)	—	no fix	2024-12-19	≤ All versions 16.20.06 and prior
CVE-2024-11155US	—	0.23% (13th)	—	no fix	2024-12-05	≤ All versions 16.20.00 and prior
CVE-2024-11158US	—	0.23% (13th)	—	no fix	2024-12-05	≤ All versions 16.20.00 and prior
CVE-2024-12672US	high7.3	0.22% (12th)	—	no fix	2024-12-19	≤ All versions 16.20.06 and prior

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-787Out-of-bounds Write9 CVEs
CWE-125Out-of-bounds Read5 CVEs
CWE-457Use of Uninitialized Variable3 CVEs
CWE-824Access of Uninitialized Pointer3 CVEs
CWE-1395Dependency on Vulnerable Third-Party Component2 CVEs
CWE-20Improper Input Validation2 CVEs
CWE-416Use After Free2 CVEs
CWE-121Stack-based Buffer Overflow1 CVEs

sources (2)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)21 CVEs
NLNCSC-NL (CSAF)11 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan