CVE-2025-6377
Arena® Simulation Out-Of-Bounds Write Remote Code Execution Vulnerability
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Arena® Simulation Out-Of-Bounds Write Remote Code Execution Vulnerability
A remote code execution security issue exists in the Rockwell Automation Arena®. A crafted DOE file can force Arena Simulation to write beyond the boundaries of an allocated object. Exploitation requires user interaction, such as opening a malicious file within the software. If exploited, a threat actor could execute arbitrary code on the target system. The software must run under the context of the administrator in order to cause worse case impact. This is reflected in the Rockwell CVSS score, as AT:P.
Reserved 2025-06-19 | Published 2025-07-09 | Updated 2025-07-09 | Assigner RockwellCWE-20 Improper Input Validation
www.rockwellautomation.com/...dvisories/advisory.SD1729.html
Support options
