Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Input Validation Vulnerability exists in Arena® Input Analyzer
Vulnerability Description
A memory corruption vulnerability exists in the affected products when parsing DFT files. Local threat actors can exploit this issue to disclose information and to execute arbitrary code. To exploit this vulnerability a legitimate user must open a malicious DFT file.
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Vulnerability Type
CWE-1284
Vulnerability Title
Rockwell Automation Arena Input Analyzer 安全漏洞
Vulnerability Description
Rockwell Automation Arena Input Analyzer是美国罗克韦尔（Rockwell Automation）公司的一款用于建模和模拟复杂系统的软件。 Rockwell Automation Arena Input Analyzer 16.20.04之前版本存在安全漏洞，该漏洞源于在解析DFT文件时存在内存损坏漏洞，本地攻击者可以利用此问题泄露信息并执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A