CVE-2025-2286
Local Code Execution Vulnerability in Arena®
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Local Code Execution Vulnerability in Arena®
A local code execution vulnerability exists in the Rockwell Automation Arena® due to an uninitialized pointer. The flaw is result of improper validation of user-supplied data. If exploited a threat actor can disclose information and execute arbitrary code on the system. To exploit the vulnerability a legitimate user must open a malicious DOE file.
Reserved 2025-03-13 | Published 2025-04-08 | Updated 2025-04-08 | Assigner RockwellCWE-457 Uninitialized Variable
www.rockwellautomation.com/...dvisories/advisory.SD1726.html
Support options
