CVE-2024-11364
Rockwell Automation Third Party Vulnerability in Arena®
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Rockwell Automation Third Party Vulnerability in Arena®
Another “uninitialized variable” code execution vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to craft a DOE file and force the software to access a variable prior to it being initialized. If exploited, a threat actor could leverage this vulnerability to execute arbitrary code. To exploit this vulnerability, a legitimate user must execute the malicious code crafted by the threat actor.
Reserved 2024-11-18 | Published 2024-12-19 | Updated 2024-12-20 | Assigner Rockwellwww.rockwellautomation.com/...dvisories/advisory.SD1713.html
Support options
