PT-2024-2515 · Rockwell Automation · Rockwell Automation Arena Simulation

Michael Heinzl · Published 2024-03-26 · Updated 2024-12-17 · CVE-2024-21918

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Rockwell Automation Arena Simulation (affected versions not specified)

Description A memory buffer vulnerability in Rockwell Automation Arena Simulation software could potentially allow a malicious user to insert unauthorized code to the software by corrupting the memory and triggering an access violation. Once inside, the threat actor can run harmful code on the system, affecting the confidentiality, integrity, and availability of the product. To trigger this, the user would unwittingly need to open a malicious file shared by the threat actor. The vulnerability is related to the use of memory after it has been freed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting access to the software to minimize the risk of exploitation. Avoid opening files from untrusted sources to reduce the risk of triggering the vulnerability.

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

BDU:2024-02496

CVE-2024-21918

Affected Products

Rockwell Automation Arena Simulation

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2024-21918 · Security Note
• https://bdu.fstec.ru/vul/2024-02496 · Security Note
• https://osv.dev/vulnerability/CVE-2024-21918 · Vendor Advisory
• https://rockwellautomation.com/en-us/support/advisory.SD-1665.html · Note
• https://twitter.com/dailycve/status/1866159749349196002 · Twitter Post
• https://twitter.com/CVEnew/status/1772652976622231927 · Twitter Post
• https://t.me/cvenotify/74709 · Telegram Post
• https://twitter.com/RedPacketSec/status/1772928295610335350 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1772692577399022031 · Twitter Post