Rockwell Automation Arena Stack-Based Buffer Overflow Vulnerability Allowing Arbitrary Code Execution

A stack-based buffer overflow vulnerability has been identified in Rockwell Automation Arena Simulation, specifically in versions through 16.20.10. This vulnerability arises from the parsing of DOE files, allowing local attackers to potentially execute arbitrary code on affected installations. Exploitation of this issue requires opening a malicious DOE file.

Impact

Exploitation of this vulnerability could lead to arbitrary code execution on the affected system.

Remediation

Users can upgrade to Arena Simulation version 16.20.11 or later to address this vulnerability. For those unable to upgrade, Rockwell Automation recommends following their security best practices.