A memory corruption vulnerability exists in the Arena® Simulation linker.exe (Siman) component due to improper validation of user‑supplied data, enabling an out‑of‑bounds write, which is a CWE‑787 flaw. Properly crafted user data can lead to arbitrary code execution in the context of the current Arena process. This flaw allows an attacker to compromise confidentiality and integrity of systems running Arena by executing arbitrary instructions when a user opens a malicious file.

Rockwell Automation Arena Simulation is affected. Versions earlier than V17.00.01 are potentially vulnerable; the vendor recommends upgrading to V17.00.01 or later to mitigate the issue.

The CVSS score of 7 indicates a high severity, while the EPSS score of less than 1% shows a very low probability of exploitation in the wild. The flaw is not listed in the CISA KEV catalog. The likely attack vector involves an attacker convincing an end‑user to open a specially crafted file, which triggers the out‑of‑bounds write and leads to code execution. The vulnerability is most relevant in environments where Arena files are shared or where users may inadvertently open malicious simulation project files.