Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Arena® Simulation Out-Of-Bounds Write Remote Code Execution Vulnerability
Vulnerability Description
A remote code execution security issue exists in the Rockwell Automation Arena®. A crafted DOE file can force Arena Simulation to write beyond the boundaries of an allocated object. Exploitation requires user interaction, such as opening a malicious file within the software. If exploited, a threat actor could execute arbitrary code on the target system. The software must run under the context of the administrator in order to cause worse case impact. This is reflected in the Rockwell CVSS score, as AT:P.
CVSS Information
N/A
Vulnerability Type
输入验证不恰当
Vulnerability Title
Rockwell Automation Arena 安全漏洞
Vulnerability Description
Rockwell Automation Arena是美国罗克韦尔（Rockwell Automation）公司的一款离散事件模拟和自动化软件。 Rockwell Automation Arena存在安全漏洞，该漏洞源于特制DOE文件可能导致越界写入，可能执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A