CVE-2024-21912CWE-787

Rockwell Automation Arena Simulation vulnerable to out of bounds write

High · published March 26, 2024

CVSS v3.1
7.8
EPSS
0%
Percentile
16.3
In the wild
Unconfirmed
What it is

An arbitrary code execution vulnerability in Rockwell Automation Arena Simulation could let a malicious user insert unauthorized code into the software. This is done by writing beyond the designated memory area, which causes an access violation. Once inside, the threat actor can run harmful code on the system. This affects the confidentiality, integrity, and availability of the product. To trigger this, the user would unwittingly need to open a malicious file shared by the threat actor.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00256 · 16.3th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2024-03-26T15:34Z
EPSS history
Timeline
  • 26 MAR 15:34Z
    Rockwell Automation Arena Simulation vulnerable to out of bounds write
    cvelistv5