Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2025-7033 1 Rockwellautomation 2 Arena, Arena Simulation 2025-08-13 7.8 High
A memory abuse issue exists in the Rockwell Automation Arena® Simulation. A custom file can force Arena Simulation to read and write past the end of memory space. Successful use requires user action, such as opening a bad file or webpage. If used, a threat actor could execute code or disclose information.
CVE-2024-21913 1 Rockwellautomation 2 Arena, Arena Simulation Software 2024-12-17 7.8 High
A heap-based memory buffer overflow vulnerability in Rockwell Automation Arena Simulation software could potentially allow a malicious user to insert unauthorized code into the software by overstepping the memory boundaries, which triggers an access violation. Once inside, the threat actor can run harmful code on the system. This affects the confidentiality, integrity, and availability of the product. To trigger this, the user would unwittingly need to open a malicious file shared by the threat actor.