CVE-2025-3286
Local Code Execution Vulnerability in Arena®
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Local Code Execution Vulnerability in Arena®
A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat actor being able to read outside of the allocated memory buffer. The flaw is a result of improper validation of user-supplied data. If exploited a threat actor can disclose information and execute arbitrary code on the system. To exploit the vulnerability a legitimate user must open a malicious DOE file.
Reserved 2025-04-04 | Published 2025-04-08 | Updated 2025-04-08 | Assigner Rockwellwww.rockwellautomation.com/...dvisories/advisory.SD1726.html
Support options
