Local Code Execution Vulnerability in Rockwell Automation Arena®

CVE-2025-3287

What is CVE-2025-3287?

A local code execution vulnerability found in Rockwell Automation Arena® is caused by a stack-based memory buffer overflow due to improper validation of user-supplied data. If exploited, this flaw allows a malicious actor to execute arbitrary code and disclose sensitive information on the affected system. The attack requires that a legitimate user opens a compromised DOE file, making it essential for users to be aware of the risks and apply best practices for secure file handling.

References