CVE-2025-2286highCWE-457

CVE-2025-2286: fallo de gravedad alta en Rockwell Automation Arena®

Local Code Execution Vulnerability in Arena®

Publicada el

Seguir esta CVE+ Monitorear Arena®

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

21Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 8.5epss 0.3%
A local code execution vulnerability exists in the Rockwell Automation Arena®  due to an uninitialized pointer. The flaw is result of improper validation of user-supplied data. If exploited a threat actor can disclose information and execute arbitrary code on the system. To exploit the vulnerability a legitimate user must open a malicious DOE file.
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Productos afectados
Rockwell Automation · Arena®
CVEs relacionadas — Rockwell Automation Arena®

En el mismo producto, de las más peligrosas a las menos.

CVE-2024-11364HIGHRockwell Automation Third Party Vulnerability in Arena®EPSS 0.3%CVE-2025-3289HIGHLocal Code Execution Vulnerability in Arena®EPSS 0.3%CVE-2025-3287HIGHLocal Code Execution Vulnerability in Arena®EPSS 0.3%CVE-2025-3288HIGHLocal Code Execution Vulnerability in Arena®EPSS 0.3%CVE-2025-3286HIGHLocal Code Execution Vulnerability in Arena®EPSS 0.3%CVE-2025-3285HIGHLocal Code Execution Vulnerability in Arena®EPSS 0.3%