CVE-2019-13510: vulnerability in Rockwell Automation Arena Simulation Software…
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
8Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 12%
Rockwell Automation Arena Simulation Software versions 16.00.00 and earlier contain a USE AFTER FREE CWE-416. A maliciously crafted Arena file opened by an unsuspecting user may result in the application crashing or the execution of arbitrary code.
References
https://www.us-cert.gov/ics/advisories/icsa-19-213-05https://www.zerodayinitiative.com/advisories/ZDI-19-1000/https://www.zerodayinitiative.com/advisories/ZDI-19-800/https://www.zerodayinitiative.com/advisories/ZDI-19-801/https://www.zerodayinitiative.com/advisories/ZDI-19-994/https://www.zerodayinitiative.com/advisories/ZDI-19-998/https://www.zerodayinitiative.com/advisories/ZDI-19-999/https://www.zerodayinitiative.com/advisories/ZDI-20-926/https://www.zerodayinitiative.com/advisories/ZDI-20-927/https://www.zerodayinitiative.com/advisories/ZDI-20-928/https://www.zerodayinitiative.com/advisories/ZDI-20-929/https://www.zerodayinitiative.com/advisories/ZDI-20-930/