Local Code Execution Vulnerability in Rockwell Automation Arena®

CVE-2025-3286

What is CVE-2025-3286?

A local code execution vulnerability in Rockwell Automation's Arena® allows a malicious user to read data outside the allocated memory buffer due to insufficient validation of user-supplied data. If a legitimate user opens a specially crafted DOE file, the vulnerability can be exploited to disclose sensitive information and execute arbitrary code on the affected system, posing significant security risks.

References