CVE-2024-11156
HIGHRockwell Automation Arena < 16.20.03 - Out-of-bounds Write in DOE File
Title source: llmDescription
An “out of bounds write” code execution vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to write beyond the boundaries of allocated memory in a DOE file. If exploited, a threat actor could leverage this vulnerability to execute arbitrary code. To exploit this vulnerability, a legitimate user must execute the malicious code crafted by the threat actor.
References (1)
Core 1
Core References
Scores
CVSS v3
7.8
EPSS
0.0014
EPSS Percentile
33.0%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
total
Details
CWE
CWE-787
Status
published
Products (1)
rockwellautomation/arena
< 16.20.03
Published
Dec 05, 2024
Tracked Since
Feb 18, 2026