Read the docs

Rockwell

Records435All Threatist records
Exploited (KEV)2In CISA KEV
CVSS critical95CVSS 9.0–10.0
CVSS high280CVSS 7.0–8.9

Exploited now

Rockwell records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

46 records in Arena · all components

Priority MEDIUM 44

An arbitrary code execution vulnerability contained in Rockwell Automation's Arena Simulation software was reported that could potentially allow a malicious user to commit unauthorized arbitrary code to the software by u…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0085 Published 2023-05-09 No fix listed CWE-125
Priority MEDIUM 44

An arbitrary code execution vulnerability contained in Rockwell Automation's Arena Simulation software was reported that could potentially allow a malicious user to commit unauthorized arbitrary code to the software by u…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0085 Published 2023-05-09 No fix listed CWE-125
Priority MEDIUM 43

A maliciously crafted program file opened by an unsuspecting user of Rockwell Automation Arena Simulation Software version 16.00.00 and earlier may result in the limited exposure of information related to the targeted wo…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.05571 Published 2020-01-27 No fix listed CWE-357
Priority MEDIUM 43

A maliciously crafted program file opened by an unsuspecting user of Rockwell Automation Arena Simulation Software version 16.00.00 and earlier may result in the limited exposure of information related to the targeted wo…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.05571 Published 2020-01-27 No fix listed CWE-843
Priority MEDIUM 42

An arbitrary code execution vulnerability contained in Rockwell Automation's Arena Simulation software was reported that could potentially allow a malicious user to commit unauthorized arbitrary code to the software by u…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.009 Published 2023-05-09 No fix listed CWE-787
Priority LOW 39

A local code execution vulnerability exists in the Rockwell Automation Arena® due to a stack-based memory buffer overflow.

CVSS 4.0HIGH 8.5 Local No auth User interaction EPSS 0.00308 Published 2025-04-08 No fix listed CWE-787
Priority LOW 39

A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat actor being able to read outside of the allocated memory buffer.

CVSS 4.0HIGH 8.5 Local No auth User interaction EPSS 0.00303 Published 2025-04-08 No fix listed CWE-125
Priority LOW 39

A local code execution vulnerability exists in the Rockwell Automation Arena® due to a stack-based memory buffer overflow.

CVSS 4.0HIGH 8.5 Local No auth User interaction EPSS 0.00308 Published 2025-04-08 No fix listed CWE-125
Priority LOW 39

A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat actor being able to read outside of the allocated memory buffer.

CVSS 4.0HIGH 8.5 Local No auth User interaction EPSS 0.00303 Published 2025-04-08 No fix listed CWE-125
Priority LOW 39

A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat actor being able to read outside of the allocated memory buffer.

CVSS 4.0HIGH 8.5 Local No auth User interaction EPSS 0.00303 Published 2025-04-08 No fix listed CWE-125
Priority LOW 39

A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat actor being able to write outside of the allocated memory buffer.

CVSS 4.0HIGH 8.5 Local No auth User interaction EPSS 0.00303 Published 2025-04-08 No fix listed CWE-787
Priority LOW 39

A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat actor being able to write outside of the allocated memory buffer.

CVSS 4.0HIGH 8.5 Local No auth User interaction EPSS 0.00303 Published 2025-04-08 No fix listed CWE-787
Priority LOW 39

A local code execution vulnerability exists in the Rockwell Automation Arena® due to an uninitialized pointer.

CVSS 4.0HIGH 8.5 Local No auth User interaction EPSS 0.00303 Published 2025-04-08 No fix listed CWE-457
Priority LOW 39

A local code execution vulnerability exists in the Rockwell Automation Arena® due to an uninitialized pointer.

CVSS 4.0HIGH 8.5 Local No auth User interaction EPSS 0.00303 Published 2025-04-08 No fix listed CWE-457
Priority LOW 39

A local code execution vulnerability exists in the Rockwell Automation Arena® due to an uninitialized pointer.

CVSS 4.0HIGH 8.5 Local No auth User interaction EPSS 0.00301 Published 2025-04-08 No fix listed CWE-457
Priority LOW 39

Another “uninitialized variable” code execution vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to craft a DOE file and force the software to access a variable prior to it being ini…

CVSS 4.0HIGH 8.5 Local No auth User interaction EPSS 0.00345 Published 2024-12-19 No fix listed CWE-908
Priority LOW 38

A third-party vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to write beyond the boundaries of allocated memory in a DOE file.

CVSS 4.0HIGH 8.5 Local No auth User interaction EPSS 0.00225 Published 2024-12-19 No fix listed CWE-787
Priority LOW 38

An “uninitialized variable” code execution vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to craft a DOE file and force the software to access a variable before it being initialize…

CVSS 4.0HIGH 8.5 Local No auth User interaction EPSS 0.00232 Published 2024-12-05 No fix listed CWE-665
Priority LOW 38

An “out of bounds write” code execution vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to write beyond the boundaries of allocated memory in a DOE file.

CVSS 4.0HIGH 8.5 Local No auth User interaction EPSS 0.00243 Published 2024-12-05 No fix listed CWE-787
Priority LOW 38

A “use after free” code execution vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to craft a DOE file and force the software to use a resource that was already used.

CVSS 4.0HIGH 8.5 Local No auth User interaction EPSS 0.00233 Published 2024-12-05 No fix listed CWE-416
Load more
Open these records in search →