Local Code Execution Vulnerability in Rockwell Automation Arena

CVE-2025-2288

What is CVE-2025-2288?

A local code execution vulnerability in Rockwell Automation Arena could allow an attacker to execute arbitrary code by writing outside of the allocated memory buffer. This flaw arises from improper validation of user-supplied data, enabling threat actors to potentially disclose sensitive information or run malicious code. To exploit this vulnerability, a legitimate user must inadvertently open a specially crafted DOE file, making it essential for users to be cautious about opening unknown files.

References