Local Code Execution Vulnerability in Rockwell Automation Arena®

CVE-2025-2293

Summary

A local code execution vulnerability exists in Rockwell Automation Arena® that arises from improper validation of user-supplied data. This flaw allows a threat actor to write outside the allocated memory buffer, presenting risks of disclosing sensitive information and executing arbitrary code on the system. A legitimate user must open a malicious DOE file for exploitation, making awareness and caution essential for users to mitigate potential threats.

References