Rockwell Automation Arena Simulation Memory Corruption Vulnerability Allowing Code Execution

A memory abuse vulnerability has been identified in Rockwell Automation Arena Simulation versions through 16.20.09. This issue allows a custom file to manipulate Arena Simulation into reading and writing beyond the allocated memory boundaries. Exploitation of this vulnerability requires user interaction, such as opening a malicious file or visiting a harmful webpage. If successfully exploited, it could lead to arbitrary code execution or unauthorized information disclosure.

Impact

Exploitation of this vulnerability could result in arbitrary code execution or unauthorized information disclosure.

Remediation

Users are advised to update to Arena Simulation version 16.20.10 or later. For those unable to upgrade, it is recommended to apply general security best practices.