PT-2025-31929 · Rockwell Automation · Arena Simulation

Michael Heinzl

·

Published

2025-08-05

·

Updated

2025-08-05

·

CVE-2025-7032

CVSS v4.0
8.4
VectorAV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions:

Rockwell Automation Arena® Simulation (affected versions not specified)

Description:

A memory abuse issue exists in Rockwell Automation Arena® Simulation. A custom file can force the software to read and write past the end of memory space. User action, such as opening a malicious file or webpage, is required for successful exploitation. Exploitation could allow an attacker to execute code or disclose information.

Recommendations:

At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Stack Overflow

Weakness Enumeration

Related Identifiers

CVE-2025-7032

Affected Products

Arena Simulation