Rockwell Automation Arena Local Code Execution Vulnerability

A local code execution vulnerability has been identified in Rockwell Automation Arena versions through 16.20.08. This vulnerability allows a threat actor to write outside of the allocated memory buffer, leading to the execution of arbitrary code and the potential disclosure of information. The issue arises from improper validation of user-supplied data. Exploitation of this vulnerability requires a legitimate user to open a malicious DOE file.

Impact

Exploitation of this vulnerability could result in unauthorized information disclosure and the execution of arbitrary code on the affected system.

Remediation

Users can upgrade to Arena version 16.20.09 or later to address this vulnerability. For those unable to upgrade, Rockwell Automation recommends applying general security best practices where possible.