Local Code Execution Vulnerability in Rockwell Automation Arena Software

CVE-2025-3285

What is CVE-2025-3285?

A local code execution vulnerability in Rockwell Automation's Arena software allows threat actors to exploit improper validation of user-supplied data. By manipulating the software, an attacker can potentially read outside the allocated memory buffer, leading to unauthorized access and execution of arbitrary code. This vulnerability necessitates that a legitimate user opens a specially crafted DOE file, thereby enabling exploitation. Organizations using Arena should review their security measures to mitigate risks associated with this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References