Read the docs
TI-2025-10927 Aliases CVE-2025-11918GHSA-qwg2-xh56-jqw6

Rockwell Automation Arena® Simulation Stack-Based Buffer Overflow Vulnerability

Priority LOW 32CWE-121Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
Active
Attack complexity
High
Attack requirements
None
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-121 and the CVSS impact.

Summary

Rockwell Automation Arena® suffers from a stack-based buffer overflow vulnerability. The specific flaw exists within the parsing of DOE files. Local attackers are able to exploit this issue to potentially execute arbitrary code on affected installations of Arena®. Exploiting the vulnerability requires opening a malicious DOE file.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00168 6th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
RockwellArena® Simulationup to 16.20.10—No fix listedCNA
  • Arena® Simulation VendorRockwell Affected up to 16.20.10 Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:rockwellautomation:arena:*:*:*:*:*:*:*:*before 16.20.11VulnerableRockwell
  • cpe:2.3:a:rockwellautomation:arena:*:*:*:*:*:*:*:* Versions before 16.20.11 Vulnerable ·Rockwell

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-11918
  2. 2026-10-03 Alias added: GHSA-qwg2-xh56-jqw6

References

Advisory 1

  • TI-2019-10142 Use after free in Rockwell Automation Arena Simulation Software versions 16.00.00 and… CVSS 3.0HIGH 7.8
  • TI-2023-13840 Rockwell Automation Arena Simulation Software Remote Code Execution Vulnerability CVSS 3.1CRITICAL 9.8
  • TI-2023-13839 Rockwell Automation Arena Simulation Software Remote Code Execution Vulnerability CVSS 3.1CRITICAL 9.8
  • TI-2019-10153 A maliciously crafted program file opened by an unsuspecting user of Rockwell Automation… CVSS 3.1HIGH 7.8
  • TI-2019-10151 Type confusion in Rockwell Automation Arena Simulation Software CVSS 3.1HIGH 7.8
  • TI-2023-13841 Rockwell Automation Arena Simulation Software Remote Code Execution Vulnerability CVSS 3.1HIGH 8.8
See all 45 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences