Filtered by vendor Rockwellautomation Subscriptions
Filtered by product Arena Simulation Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2025-11918 1 Rockwellautomation 2 Arena, Arena Simulation 2025-11-17 7.3 High
Rockwell Automation Arena® suffers from a stack-based buffer overflow vulnerability. The specific flaw exists within the parsing of DOE files. Local attackers are able to exploit this issue to potentially execute arbitrary code on affected installations of Arena®. Exploiting the vulnerability requires opening a malicious DOE file.
CVE-2025-7033 1 Rockwellautomation 2 Arena, Arena Simulation 2025-08-13 7.8 High
A memory abuse issue exists in the Rockwell Automation Arena® Simulation. A custom file can force Arena Simulation to read and write past the end of memory space. Successful use requires user action, such as opening a bad file or webpage. If used, a threat actor could execute code or disclose information.