CVE-2024-2929: high-severity vulnerability in Rockwell Automation Arena Simulation
Rockwell Automation Arena Simulation Vulnerable To Memory Corruption
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 7.8epss 0.3%
A memory corruption vulnerability in Rockwell Automation Arena Simulation software could potentially allow a malicious user to insert unauthorized code to the software by corrupting the memory triggering an access violation. Once inside, the threat actor can run harmful code on the system. This affects the confidentiality, integrity, and availability of the product. To trigger this, the user would unwittingly need to open a malicious file shared by the threat actor.
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Rockwell Automation · Arena SimulationRelated CVEs — Rockwell Automation Arena Simulation
In the same product, most dangerous first.
CVE-2023-29462HIGHRockwell Automation Arena Simulation Software Remote Code Execution VulnerabilityEPSS 0.9%CVE-2023-29461HIGHRockwell Automation Arena Simulation Software Remote Code Execution VulnerabilityEPSS 0.9%CVE-2023-29460HIGHRockwell Automation Arena Simulation Software Remote Code Execution VulnerabilityEPSS 0.9%CVE-2024-21919HIGHRockwell Automation Arena Simulation Vulnerable To Uninitialized PointerEPSS 0.3%CVE-2023-27854HIGHRockwell Automation Arena® Simulation Out of Bounds Read VulnerabilityEPSS 0.3%CVE-2023-27858HIGHRockwell Automation Arena® Simulation Uninitialized Pointer VulnerabilityEPSS 0.3%